AirGapped Drive PBS

    Air-gapped hosted PBS, fully managed, for offsite backup of your Proxmox infrastructure. Physical disk rotation ensures ransomware protection with minimum 2 months offline.

    🔒Air-gapped isolation through physical rotation
    Understanding air-gapped backup
    Online
    Air-gapped
    Air-gapped

    Managed PBS Air-Gapped: Guaranteed Physical Isolation

    Offsite backup that ransomware cannot reach — because it is not connected

    Air-Gapped Isolation

    At least 2 disks permanently physically disconnected from the network

    Ransomware Protection

    Ransomware protection: impossible to encrypt what is not connected

    Guaranteed Monthly Rotation

    Commitment: 2 disks offline at all times, i.e. 2 months of air-gapped data

    Expert Management

    Our team manages rotations and disk mounting

    What we commit to holding

    We advertise the cadence we can hold in every circumstance, not our best case.

    The contractual commitment

    • Monthly disk rotation
    • 2 disks offline at all times (M-1 and M-2)
    • That is 2 months of backups unreachable over the network

    The operational practice

    • A pool of 5 disks, 4 of them offline
    • Target swap every 15 days
    • Margin deliberately kept between practice and promise

    If a disk fails or a swap slips, the commitment — 2 disks offline, monthly rotation — still holds. That is the whole point of the margin: a promise kept beats a promise that flatters.

    Air-Gapped Managed PBS Advantages

    Client account delivered without delete permission by default
    Ransomware protection through physical isolation
    Guaranteed monthly media rotation
    Minimum 2 months of air-gapped backups
    Fireproof safe included
    Replication across 2 separate sites
    Optional AES-256 client-side encryption, recommended
    Encrypted offline disks
    PBS deduplication and compression
    Fast restore from online disk
    French technical support
    Supports NIS2 and GDPR compliance

    Air-Gapped Protection

    Disk rotation included

    34EUR excl. tax
    per TB / month

    Volume pricing:

    1 TB:34EUR excl. tax/month
    2 TB:68EUR excl. tax/month
    3 TB:102EUR excl. tax/month
    5 TB:170EUR excl. tax/month

    Above 5 TB: custom quote
    3 rotating disks + management included

    Secure storage included

    Air-gapped disks are stored by default in a fireproof safe on our site.

    Need storage at a specific location? Custom pricing based on your requirements.

    Or schedule a 30-min call →

    Offline media reserved for you alone

    The online PBS that receives your backups stays shared in every case. What can be reserved for you is the offline media set — the one that goes to the safe, and that we can lend you, subject to a deposit.

    How that copy is made: offline copy of a PBS datastore with zfs send. And the day the disk comes back out of the safe: reactivate the datastore on a fresh PBS.

    Shared offline media

    included — €34 excl. VAT/TB/month

    The standard. Your backups share media with other customers, each in its own datastore — and unreadable without your key if you have enabled client-side encryption, which we recommend. The disks are ours: we replace them and rotate them without you ever needing to know.

    Dedicated offline media

    + pricing below

    Media reserved for you, nobody else on it. You can ask us to lend you one so you can restore on your own site, subject to a deposit. At the end of the contract, the dedicated disks can be sold to you.

    Per-TB price for dedicated media

    1 to 3 TB€25 excl. VAT/TB/month
    4 to 6 TB€20 excl. VAT/TB/month
    7 to 12 TB€18 excl. VAT/TB/month
    13 to 19 TB€17 excl. VAT/TB/month
    20 to 24 TB€16.50 excl. VAT/TB/month
    25 to 39 TB€16 excl. VAT/TB/month
    40 to 58 TB€15.75 excl. VAT/TB/month
    59 TB and above€15.50 excl. VAT/TB/month

    Added to the €34/TB/month. Price for a 24-month commitment; 12 months: +10%, 36 months: −10%. Minimum billing: 2 TB, i.e. €50 excl. VAT/month. This pricing also applies to the dedicated offline PBS below. It decreases with volume because it follows the price of disks.

    On bare disks: one disk per rotation slot, no redundancy, and up to 19 TB. A hardware failure loses that disk and the copy it carries; the other media in the rotation and the online copy remain available. The risk is low — every disk is checked before it is written to, at least with a SMART test, and spends its life unplugged in a safe — but it is real.

    Dedicated offline PBS

    pricing above + €99 excl. VAT/month

    The dedicated media set becomes a set of self-contained machines with redundant storage: a disk failure is absorbed, with nothing to re-copy. And on the day of a disaster, what you receive is a server that boots — not disks to plug in. It is the only possible setup from 20 TB.

    €99 excl. VAT/month whatever the volume, on top of the per-TB price above. The flat fee pays for the dedicated service — the machine, its preparation, its monitoring — and does not depend on volume; the per-TB price is what follows the price of disks.

    Both options are available on quote, outside online ordering. Committed over 12, 24 or 36 months; lending is subject to a deposit; loan, return and buy-out are quoted individually.

    Frequently asked questions

    Everything you need to know about AirGapped Drive PBS

    One disk stays online to receive your backups, and at least 2 disks stay offline at all times, physically disconnected. Our commitment is a monthly rotation: at any time you hold 2 months of air-gapped backups (M-1 and M-2). In practice we run a 5-disk pool, 4 of them offline, with a 15-day target swap — that margin exists so the commitment holds even if a disk fails.

    Ransomware cannot encrypt data that is physically disconnected from the network. Even in case of total compromise of your infrastructure, your air-gapped backups remain intact.

    Backups on the online disk are accessible immediately. For air-gapped disks, allow time for our team to remount them: these plans prioritise isolation, not restore speed.

    The contractual commitment is a monthly swap, which guarantees 2 disks offline at all times — 2 months of backups that are completely offline and network-inaccessible. Our operational target is shorter: a swap every 15 days across a 5-disk pool, 4 of them offline. We advertise the cadence we can hold in every circumstance, including when a disk has to be replaced.

    Offline disks are encrypted and stored by default in a fireproof safe on our site. For specific needs (storage at your site or a third-party location), we offer custom solutions on request.

    By default, we deliver the account without delete permission: it can back up and restore, but cannot erase anything. An attacker or ransomware that takes over your Proxmox VE or servers therefore cannot delete the backups already sent, which limits the impact of a breach on your side. Limits: deletion remains possible if you asked for a datastore administrator account, if we ourselves are breached, or through a security flaw in PBS. Your offline disks are also physically disconnected: ransomware cannot reach them, and you always have 2 months of offline backups on top of the restore points on the online disk. The one limit: if the infection stayed dormant longer than the oldest offline copy (2 months under our contractual commitment), that copy already contains compromised data. Additionally, PBS snapshots allow you to restore from a point before the attack from the online disk.

    RDEM Systems keeps your managed PBS and air-gapped rotation system operational 24/7. Our team handles planned maintenance, disk swaps and pool tracking, and emergency interventions — including mounting offline disks for disaster recovery.

    Yes, but the two layers need separating: the online PBS that receives your backups stays shared in every case. What can be reserved for you is the offline media set. Dedicated offline media is billed from €25 down to €15.50 excl. VAT/TB/month depending on volume (24-month commitment), on top of the €34 — on bare disks, one disk per rotation slot, so no redundancy, and up to 19 TB. A dedicated offline PBS adds a flat €99 excl. VAT/month to that pricing: self-contained machines with redundant storage, where a disk failure is absorbed with nothing to re-copy. It is the only possible setup from 20 TB, and when disaster strikes, what we lend you is a server that boots. Dedicated media on bare disks can be lent to you too, so you can restore on your own site. Either way, the loan is subject to a deposit, and at the end of the contract the dedicated disks can be sold to you. Both options are available on quote, outside online ordering.

    Client-side encryption is not on by default, you decide — and we always recommend it. Once enabled, your backups are encrypted with AES-256 by proxmox-backup-client before they leave your infrastructure, with a key that stays with you. The option is set in Proxmox VE (Encryption tab of the PBS storage). The offline disks are also encrypted by us, whether or not you enable your key; with your key enabled, the content of your backups stays unreadable to anyone who does not hold it, including us. Keep that key outside the infrastructure you back up: without it, nobody can restore.

    The online disk and air-gapped disks are hosted in secure European datacenters, which supports your GDPR compliance. Offline disks are stored in a fireproof safe on-site. Hosting in France on request.

    Yes, proxmox-backup-client can be installed on any Linux server, not just Proxmox VE. You can back up your physical servers, VMs, and containers to your managed PBS with air-gapped protection.