CISA’s #StopRansomware Guide warns that “many ransomware variants attempt to find and subsequently delete or encrypt accessible backups.” That is why one copy is locked where nobody, including us, can change it.
Where your copies live
How we test these copies is set out in our method.
Primary US region
Your first cloud copy sits in an encrypted object store in a US region, used for everyday restores.
Locked second region
A second copy sits in another US region at least 500 miles away, immutable for 30 days by default.
Nothing leaves the US
Both regions are in the US, and the engineers who can reach them work in the US.
Your local copy
A NAS or local appliance you already run can stay as a fast local copy; we add the cloud copies.
Who can reach your data
Personal data handling is covered in our privacy notice.
US engineers only
Only Ezbre engineers in the US can open your backups, each background-checked and under a confidentiality agreement.
Every access logged
Each sign-in to client data and each restore is logged with the engineer’s name and the time.
Two-factor sign-in
A password alone never reaches client data. Every engineer signs in with a second factor, every time.
Your key, your choice
Hold the encryption key yourself on Server Backup or Immutable Offsite Copy; then nobody at Ezbre can read your data.
Encryption at each step
AES-256 at rest and TLS in transit, on every plan.
| Stage | How | Who holds the key |
|---|---|---|
| Sent to the cloud | TLS in transit | Both ends, for that session only |
| Server copies, primary region | AES-256 at rest | Ezbre, or you on Server Backup |
| Locked copy, second region | AES-256 at rest, immutable for 30 days or longer | Ezbre, or you on Server Backup or Immutable Offsite Copy |
| Laptops, desktops and cloud apps | AES-256 at rest | Ezbre |
| Restored to your machine | TLS in transit | Both ends, for that session only |
What we do not claim
We do not claim SOC 2, ISO 27001 or any other certification, and we never call ourselves HIPAA compliant. Whether our service fits your rules is for your compliance officer or counsel to decide.
We will complete your security questionnaire, and we sign a business associate agreement for clinics on request. Restore times are targets, never promises.
Security questions, answered plainly
Can Ezbre staff read our files?
Yes, unless you hold the key. Our engineers can open your backups in order to restore them, and every access is logged behind two-factor sign-in. If you hold your own key on Server Backup or Immutable Offsite Copy, nobody at Ezbre can read the data. The trade-off is real: lose the key, and we cannot restore it.
What does immutable mean here?
It means nobody can change or delete the copy until its lock ends, including our own engineers and anyone holding a stolen password. The lock is 30 days by default and can run up to 1 year on the Immutable Offsite Copy plan. When a lock ends, the normal retention schedule takes over.
What if someone steals an admin password?
They still cannot delete the locked copy, because it ignores delete requests from every account until the lock ends. If the password is used to encrypt or remove files, we restore from a version saved before the change. Servers keep 30 daily versions by default, so there is usually a clean one to choose.
Will you complete our security questionnaire?
Yes. Send it to mail@ezbre.com and an engineer fills it in. We answer each question with what we actually do and mark gaps plainly as gaps. Clinics can also ask us to sign a business associate agreement; your compliance officer decides whether our answers meet your rules.
What happens to our copies if we leave?
You get a full export in standard formats at no charge. Once you confirm the export, we delete our copies 30 days later and send written confirmation. A copy still under an immutable lock is deleted when its lock ends, and the confirmation says when that will be.
Send us your security questionnaire
Email it to mail@ezbre.com, or book a free check and see the setup for yourself first.