Drive Bank PBS

Drive Bank PBS combines air-gapped disk backup with physical storage in a bank vault. Each month, one rotation disk goes to a secure vault in France: two months of backups are kept there, and one disk stays online.

A bank vault offers maximum physical protection: controlled access, 24/7 surveillance, fire and intrusion resistance. It is the highest level of security for your backups.

Vault disks are retrieved within 96 business hours after request, following the bank's vault-exit procedure. In case of emergency, shorter delays may be possible depending on circumstances. The restore starts once the disks are back; its duration depends on your volume and your bandwidth.

Yes, but NIS2 does not certify a product: compliance is assessed at the level of your organization. Drive Bank PBS provides the building blocks it expects for critical backups: physical isolation, secure off-site storage, encryption, and complete documentation.

By default, we deliver the account without delete permission: it can back up and restore, but cannot erase anything. An attacker or ransomware that takes over your Proxmox VE or servers therefore cannot delete the backups already sent, which limits the impact of a breach on your side. Limits: deletion remains possible if you asked for a datastore administrator account, if we ourselves are breached, or through a security flaw in PBS. Your disks in the bank vault are also physically disconnected from any network: ransomware cannot reach them. The one limit: if the infection stayed dormant longer than the oldest offline copy, that copy already contains compromised data. Additionally, PBS snapshots allow you to restore from a point before the attack from the online disk.

RDEM Systems keeps your hosted PBS and bank vault logistics operational 24/7. Our team handles planned maintenance, secure disk rotation with the vault, and emergency interventions — including vault retrieval within 96 business hours for disaster recovery.

Client-side encryption is not on by default, you decide — and we always recommend it. Once enabled, your backups are encrypted with AES-256 by proxmox-backup-client before they leave your infrastructure, with a key that stays with you. The option is set in Proxmox VE (Encryption tab of the PBS storage). Disks in the bank vault are then unreadable without your key, even in case of unauthorized physical access. Keep that key outside the infrastructure you back up: without it, nobody can restore.

The online disk is hosted in a European datacenter. Air-gapped disks are stored in a French bank vault, which supports your GDPR and NIS2 compliance, with maximum physical protection.

Yes, proxmox-backup-client can be installed on any Linux server. You can back up your physical servers, VMs, and containers to your hosted PBS with bank vault storage.