Client-side encrypted snapshots for configuration and infrastructure state. Keys never leave your machine; the server only ever sees ciphertext.
Data is sealed before upload with per-object keys. The storage node cannot read your snapshots.
Immutable, content-addressed revisions with configurable retention windows.
Every object is verified against its digest on write and on restore.