Backups you've already
seen restore.
Vaultly encrypts every PostgreSQL backup, verifies the stored copy after each upload, and restore-tests the newest backup of each database in an isolated sandbox every day. When you need it, you'll know it works.
Protected
12of 15 databasesBackups · 7 days
2,016all successfulRestore-verified
12 / 12last test 02:14 UTCNeeds attention
0all clearA backup isn't finished
until it's been proven.
Most tools stop when the upload succeeds. Vaultly checks the copy that actually sits in storage, and restores it for real.
Encrypted & uploaded
Dumped with the matching PostgreSQL version, encrypted with AES-256 as it streams, and uploaded. Nothing readable touches disk.
Integrity verified
The stored file is downloaded again, its checksum compared, every block decrypted and the archive read end to end.
Restore test passed
Once a day, the newest verified backup of each database is restored into a sealed sandbox, checked object by object, then deleted.
What gets restore-tested: steps 1 and 2 run for every backup. The restore test runs once a day on the newest verified backup of each database, for backups up to 5 GB. Larger backups are integrity-verified but not restore-tested, and the dashboard says so.
Everything a recovery depends on.
Nothing it doesn't.
Encrypted, your way
AES-256-GCM with a unique key per backup. Turn on own-key mode and only your passphrase can unlock them, not even us.
Verified after upload
A backup only counts once the stored copy has been re-downloaded, checksummed and fully decrypted.
Daily restore tests
Each database's newest verified backup (up to 5 GB) is restored daily into a sandbox with no network and no privileges.
Monitoring & alerts
A clear health state for every database, and an email the moment anything fails, written in plain language.
Independent recovery
Download standard PostgreSQL dumps any time, or decrypt own-key backups offline with your recovery kit.
One-click restore
Restore into the original or a staging database in one transaction: it fully succeeds or changes nothing.
Your keys.
Your data.
Your way out.
- Own-key mode. Backups unlock only with a passphrase you hold; a stolen server and storage reveal nothing.
- No lock-in. Download any backup in standard PostgreSQL format, or keep the encrypted file plus a single-file offline decrypt tool.
- Isolated testing. Restore tests run sealed off from the internet, your app and our own servers.
# Recovering an own-key backup, no Vaultly needed $ python3 vaultly_decrypt.py check-kit recovery-kit.json Own-key passphrase (input hidden): OK: the passphrase opens this recovery kit $ python3 vaultly_decrypt.py decrypt prod-api.vly -o prod.dump \ --kit recovery-kit.json --sha256 3301243f… OK: own-key backup decrypted and authenticated (2 chunks, 1,820,336 bytes -> prod.dump) $ pg_restore -d restored_db prod.dump ✓
Start free for 7 days.
Every plan includes encryption, verification, daily restore tests, alerts and independent recovery. Cancel any time.
Starter
- Up to 3 databases
- Daily backups, kept 7 days
- 20 GB encrypted storage
- Integrity check on every backup
- Daily restore test per database
Pro
- Up to 15 databases
- Hourly or daily backups
- Hourly copies 48 h, daily copies 30 days
- 200 GB encrypted storage
- Integrity check on every backup
- Daily restore test per database
7-day free trial with every feature (up to 2 databases and 5 GB during the trial). Card required, cancel any time.
The next restore you run
shouldn't be your first.
Connect a PostgreSQL database in two minutes, then watch its first backup get encrypted, verified and restore-tested.