Magnetic Bank PBS

Magnetic Bank PBS combines Proxmox backup, LTO tape archival, and bank vault storage. It is the most comprehensive level of protection for your critical data.

LTO tapes offer a very competitive cost per TB, and are inherently air-gapped once stored in a vault. Each tape runs on a 3-month cycle (the month M tape is reused at M+3); longer retention is available on quote. Manufacturers state up to 30 years of life for the medium.

Tapes are retrieved within 96 business hours after request, following the bank's vault-exit procedure. In case of emergency, shorter delays may be possible depending on circumstances. Data on disk remains immediately accessible; the restore duration then depends on your volume and your bandwidth.

This offer is designed for businesses with strict compliance requirements (NIS2, financial sector, healthcare) or long-term archival needs with maximum integrity guarantees.

By default, we deliver the account without delete permission: it can back up and restore, but cannot erase anything. An attacker or ransomware that takes over your Proxmox VE or servers therefore cannot delete the backups already sent, which limits the impact of a breach on your side. Limits: deletion remains possible if you asked for a datastore administrator account, if we ourselves are breached, or through a security flaw in PBS. Your LTO tapes in the bank vault are also physically disconnected from any network: ransomware cannot reach them. The one limit: if the infection stayed dormant longer than the oldest offline copy, that copy already contains compromised data. Additionally, PBS snapshots allow you to restore from a point before the attack from the online disk.

RDEM Systems keeps your Cloud-hosted PBS, LTO archival infrastructure, and bank vault logistics operational 24/7. Our team handles planned maintenance, tape archival, secure transport to the vault, and emergency interventions — including tape retrieval within 96 business hours for disaster recovery.

Client-side encryption is not on by default, you decide — and we always recommend it. Once enabled, your backups are encrypted with AES-256 by proxmox-backup-client before they leave your infrastructure, with a key that stays with you. The option is set in Proxmox VE (Encryption tab of the PBS storage). LTO tapes in the bank vault are then unreadable without your key, even in case of unauthorized physical access to the vault. Keep that key outside the infrastructure you back up: without it, nobody can restore.

The online disk and the LTO drives are in our own infrastructure, at Equinix Paris. LTO tapes are archived in cold storage in a French bank vault, which supports your GDPR and NIS2 compliance, with the highest level of physical protection.

Yes, proxmox-backup-client can be installed on any Linux server. You can back up your physical servers, VMs, and containers to your Cloud-hosted managed PBS with LTO archival in a bank vault.