Our manifesto

We built Vouchio because backups fail quietly

Not a compliance checklist, and not a sales page. This is what we actually believe about protecting a business's data, written down so you can hold us to it.

A backup nobody has tried to restore isn't a safety net. It's a rumor about one.

What we believe

Six things we won't compromise on

An untested backup is a false promise

A green checkmark on a backup job tells you almost nothing. We restore real data on a schedule, into a scratch environment, and prove it works, instead of hoping it will when it matters.

Immutable, not just backed up

A copy an attacker or a mistake can still delete isn't really a safety net. Retention Lock means a locked record can't be altered or erased by anyone, including us, before its retention period ends.

Encryption isn't a premium feature

Your data is encrypted at rest and in transit on every plan, including the cheapest one. We don't think basic protection should depend on how much you're paying us.

Access should be scoped, not standing

Every key is limited to your account. Internally, access to customer content is limited to what a specific support case needs, logged, and reviewed, not left open by default.

Redundancy is the default, not the upsell

Objects are replicated across storage nodes on every plan as a baseline, not a checkbox you have to find and pay extra for. Recovery Ready builds continuous offsite replication on top of that.

We'd rather over-explain than look clean

If something breaks, you hear what happened and what we changed because of it, not a status page quietly turning green again. A polished silence isn't the same thing as trust.

How we actually do this

Belief statements are easy to write. Here's what backs each one, in plain terms.

Encryption

Data moving to and from Vouchio is encrypted in transit over TLS. Data at rest is encrypted on our storage nodes, so a drive removed from our infrastructure isn't readable on its own. This is standard across every plan tier, not gated behind a higher price point.

Access control

Every access key is scoped to your account. Internal access to infrastructure follows least-privilege principles and is reviewed on a regular schedule; access to customer content specifically is limited to what's needed to operate and support the service, and every instance of it is logged.

Immutability with Retention Lock

Retention Lock is a write-once-read-many model: once a record carries a retention period, it can be read but not modified or deleted, not by a compromised admin account, and deliberately, not by Vouchio either, until that period ends. More on how this closes the gap ransomware usually exploits in our ransomware recovery guide.

Redundancy & tested recovery

Objects are replicated across multiple storage nodes as part of the base service. Recovery Ready adds continuous offsite replication and quarterly recovery drills, real restores into a scratch environment, checked against your RTO target, not a tabletop exercise. See how a drill runs without disrupting your team.

Monitoring & incident response

Our infrastructure is watched for the signals that typically precede or accompany an incident: unusual access patterns, failed authentication spikes, capacity and performance anomalies. If an incident affects customer data or availability, affected customers hear from us directly, with what happened and what changed as a result, not just a note that service is restored.

Responsible disclosure

If you're a security researcher and think you've found a vulnerability in Vouchio, tell us before anyone else finds out. Email security@vouchio.net with enough detail to reproduce it. We'll acknowledge good-faith reports, work with you on a fix, and won't pursue legal action against research conducted in good faith, without accessing or altering customer data beyond what's needed to demonstrate the issue, and reported to us before any public disclosure.

None of this is complicated, and that's deliberate. A security posture you can't explain in plain language is usually one nobody's actually checking.