Cloudback: SOC 2 Type II Encrypted Backups

Cloudback delivers SOC 2 Type II, AES-256 encrypted backups for GitHub, GitLab, Azure DevOps, and Linear. Customer-managed encryption (RSA Lockbox) keeps backup contents readable only to you. 1.7k+ customers · 14k+ repositories · 4M+ backups.

Key benefits

For DevOps leads, platform engineers, engineering managers, IT directors, and security teams who need on-demand restore and audit evidence:

• Run daily backups automatically with defaults applied on platform connect.
• Restore on demand from any retained backup.
• Backup notifications via email, Slack, Microsoft Teams, and Discord.
• Produce audit evidence with SOC 2 Type II reports and a per-action audit log.
• Cover GitHub, GitLab, Azure DevOps, and Linear from one dashboard.
• Auto-enroll new repositories as your team grows with auto-enable patterns.

Features

• Git repositories (GitHub, GitLab, Azure DevOps): full history including refs, commits, branches, tags, metadata, and Git LFS.
• Pull requests and merge requests: PR/MR data with reviews and comments where the platform exposes them.
• Platform metadata: issues, comments, labels, milestones for GitHub and GitLab; releases and wikis for GitHub.
• Linear workspaces (Preview): issues, projects, teams, documents, cycles, initiatives, milestones, labels, views, templates, and embedded files.
• Encrypted ZIP archives: AES-256, password-protected, portable across storage destinations.

Microsoft integrations

• Microsoft Azure Marketplace SaaS billing: managed via your Microsoft commercial agreement.
• Microsoft Azure Blob Storage: backup destination using your storage account and retention policy.
• Azure DevOps: backups run against your organization without additional infrastructure.
• Microsoft Teams: backup status and restore notifications delivered to your channels.
• Microsoft OneDrive: additional bring-your-own backup destination.

What makes Cloudback different

• Per-repository pricing, not per-seat. Cost tracks data, not your engineering org size.
• Customer-managed encryption (RSA Lockbox). Cloudback only holds your public key; you hold the private key.
• Multi-cloud BYO storage with replication. Seven providers (Microsoft Azure Blob, OneDrive, Amazon S3, Google Cloud, Alibaba OSS, OpenStack Swift, Wasabi) plus Cloudback-managed regions in five geographies.
• Storage deduplication and optional S3 Object Lock. Only changed data is stored; write-once on customer-managed S3 blocks compromised admin tokens.
• Vanta-integrated access review. Automated user-access syncing feeds your compliance program beyond the SOC 2 Type II baseline.
• MCP server for AI agents. An MCP server for Claude Code, Claude Desktop, Cursor, VS Code, and other MCP-compatible clients.

Get started

Click Get It Now above to start a 30-day free trial. No credit card until day 31. Setup guide at docs.cloudback.it.