Immutable & air-gapped
Once a backup is written it cannot be modified or deleted, and it lives apart from your live environment — so a breach on the site cannot reach your recovery history.
Backups & disaster recovery
Backups built to survive the worst day
Every site you host with Zinn Digital® gets immutable, offsite, air-gapped backups with regularly tested restores. When something goes wrong — a bad plugin update, a compromise, a mistaken deletion — you roll back in one click, not in a support queue.
- 30 daysbackup retention
- One clickto full restore
- 99.99%Uptime assurance
- 100,000+PBN sites hosted across every niche
A backup is only as good as its restore
Most hosts back up and hope. We test restores, because a backup you have never restored is a guess, not a guarantee. Every site is captured with restic/borg to offsite object storage, and recovery is exercised so that when you need it, it just works.
Backups are immutable and air-gapped — once written they cannot be altered or deleted by a compromised site, which is exactly what ransomware tries to do. If an attacker encrypts your live files, your clean history sits somewhere they can never reach.
We run this across more than 100,000 PBN sites in every niche, so the machinery is proven at scale rather than theoretical.
What you get on every site
Offsite object storage
Snapshots ship to Cloudflare R2 or Backblaze B2 with restic/borg — deduplicated, encrypted and stored well away from the worker that runs your site.
Tested restores
Restores are exercised regularly, not assumed. Recovery is a routine we practise, so a real recovery is a known quantity, not a first attempt under pressure.
One-click restore
Roll a site back to any retained point from the dashboard — files and database together — without raising a ticket or waiting on an engineer.
30-day retention
A rolling 30-day window of recovery points, so you can go back past a problem that took days to surface, not just the last overnight snapshot.
Ransomware-resilient by design
Immutability plus air-gapping means an encryption attack on your live files leaves a clean, untouched copy to restore from.
Disaster recovery, not just backups
- Per-site scope: every site is backed up independently, so restoring one never disturbs its neighbours.
- Evidence preserved: if a site is quarantined after a malware or phishing finding, its state is preserved before any cleanup, so nothing is lost to remediation.
- Separate control-plane DR: the platform that runs your account is recovered independently of your site data — no single failure takes out both.
- Migration safety: bring sites in with free, hands-on migrations, and every deploy and database migration is gated behind a backup and safety checks before it touches production.
- No vendor lock-in: your data and your backups are yours — export and leave whenever you choose.
FAQ
How often are my sites backed up?
Every site is backed up on a regular schedule to offsite object storage, with a rolling 30-day retention window so you can recover from problems that took time to surface.
What does air-gapped actually mean here?
Your backups are stored apart from your live environment and are immutable once written. A compromised or ransomware-hit site cannot reach, alter or delete its own backup history — so there is always a clean copy to restore from.
How long does a restore take, and do I need support?
You restore yourself, in one click from the dashboard — files and database together. There is no ticket to raise and no waiting on an engineer for a routine recovery.
Do you actually test that restores work?
Yes. Restores are exercised regularly rather than assumed. A backup that has never been restored is a guess, so we treat tested recovery as the point of backing up at all.
What happens to backups if a site is suspended or terminated?
Suspended sites keep their backups. Terminated sites are deleted only after a grace period, with backup retention respected throughout, so an accidental or disputed closure is recoverable.
Related
Host somewhere that plans for the worst day
Start a card-free 7-day trial with immutable, tested backups on every site from the first deploy. Free migrations, a 30-day money-back guarantee and no vendor lock-in.
Start free