Secure storage for your data
Upload files, back up what you cannot lose and keep your photos and videos together. One place, encrypted, hosted within the EEA.
Built on security from the ground up
Two-factor authentication is mandatory
Every user sets up an authenticator app. A password alone opens nothing.
Encrypted at rest
Your data is encrypted where it sits. Icelandic filenames survive intact.
Hosted within the EEA
Your files never leave the European Economic Area.
30-day trash
A deleted file goes to the trash and can be restored for 30 days.
Whole folders at once
Drag an entire folder into the browser and its structure is kept exactly as it was.
Browser access
Reach your data from any browser. Nothing to install.
Three steps
Create an account
Sign up and set up your authenticator app. It takes a minute.
Upload
Drag in files or whole folders. Large files keep going even if you navigate away.
Retrieve anytime
Your data waits for you, reachable from a browser when you need it.
Your data is yours
Skýjadrif is built so you do not have to take our word for it. The rules live in the system itself: encryption that cannot be skipped, separation the database enforces, and a record of everything staff do.
- Two-factor authentication is required for everyone, with no exceptions
- Encrypted in transit and at rest, and neither can be switched off
- Files in Amsterdam, the database in Frankfurt, both inside the EEA
- No customer can reach another customer’s data, and the database enforces that itself
- Earlier versions of files are kept for 90 days, so a ransomware attack cannot empty your backup
- Staff access is logged and you can see it in your own activity log
How it works
Encryption in transit
Everything travels over an encrypted connection, and the files take the same route into storage. This is not a setting that could be forgotten. The storage refuses any request that arrives unencrypted, so a mistake ends in an error rather than in unencrypted data.
Encryption at rest
Every file is stored encrypted with AES-256. The same rule applies. The storage will not accept an unencrypted file, so a file cannot be written unprotected by mistake.
What the encryption does not do
We hold the keys, not you. That means we can read your files when we need to, for example when handing over data from a recovery job. We say so plainly, because encryption is sometimes presented as though it ruled that out. Any such access is logged and visible to you.
Keeping customers apart
The access rules live in the database itself rather than in the web code. Every single table carries a rule binding each row to its owner, and the rules require full authentication as well. A query that fails to limit itself returns nothing instead of returning somebody else’s data.
Files that change or disappear
Earlier versions of files are kept for 90 days after they are replaced. New files are locked for their first fourteen days and cannot be deleted in that window. The backup client only ever uploads, so a file that disappears from your computer is recorded but never removed from storage.
Where the data sits
The files are in Wasabi’s data centre in Amsterdam. The database and authentication are with Supabase on AWS in Frankfurt. Both are inside the European Economic Area and the data does not leave it.
Certified data centres
The database and authentication run on AWS infrastructure in Frankfurt. Those data centres undergo independent audits and hold, among others, these certifications:
ISO/IEC 27001
The international standard for information security management.
ISO/IEC 27017
Security controls specific to cloud services.
ISO/IEC 27018
Protection of personal data in cloud environments.
SOC 1, 2 and 3
Independent audit reports on internal controls.
C5
The German cloud security standard from BSI, among the strictest in Europe.
GDPR and EEA
Data is hosted and processed within the European Economic Area.
Pick the space you need
Over 5 TB
Quote
For large collections and special needs. We put together a solution and a price.
Request a quotePer month, VAT included. Cancel any time. Paid by bank claim or card. Skýjadrif terms of service
What people ask
Ready to start?
Create an account, or get in touch if you would like advice on backups.