Are my backups encrypted?

Yes: in transit and at rest, and the keys never touch your server.

Encrypted before they land anywhere

Backups are taken by our orchestrator, which only ever talks to your server through encrypted channels. It is then encrypted again before being written to storage: every backup set is sealed with keys kept on our infrastructure, never on yours.

Your server cannot touch them

This is a deliberate piece of architecture: your server holds no key and no credential for the backup storage, and never talks to it. Backups are pulled by our orchestrator; nothing on your machine can list them, read them or delete them. A compromised server, even one encrypted by ransomware, cannot take your backups down with it: which is precisely the scenario they exist for.

Checked, not just written

A backup you cannot trust is not a backup: freshness is monitored every day, and automatic integrity checks re-read the stored data on a regular basis.

For what a backup contains and how retention works, see How do backups work on my Odoo instance?. To get your own copy, over HTTPS: How do I download a backup of my Odoo instance?.

Updated on: 26/08/2026