Secure Offsite Postgres Backup To Your Server or Our's Starting at ~$0.104/hour.
We understand that our security model makes the initial setup of our add-on a bit more involved than others. But we’re standing by to help!
Don’t install Remora Backup directly! Our add-on uses a helper app to give you complete control of your data flow so installation is a bit different than a typical add-on. Read the DevCenter article on how to install Remora correctly.
Using our Bring Your Own Storage plan, you are able to securely send the daily backup of your Postgres database to any server supporting SSH at the time you specify. You can then automate decryption and restoration of this database allowing you to have a failover or development / test application on a separate environment with data no more than 24 hours out of date.
Your data gets backed up daily to either your own server (supporting transfer via SSH) or our secure hosting partner off of AWS.
With Remora Backup, your Postgres data is stored off-AWS, giving you peace of mind in the event of a large-scale AWS outage.
Remora Backup was designed with Heroku Private Spaces and Heroku Shield Spaces in mind. Our use of a backup Helper App allows for secure automated daily backups of your Postgres data - even in a Shield Space.
We utilize a Helper App within your Heroku Private or Shield Space (or within your account on the Common Runtime) that you control. Your Helper App transmits your backup data directly to your server or our secure storage partner so your data never flows through our add-on.
Every step of transmission of your data - from your Remora Helper App reading the data from your Postgres DB to its transmission to your server via SSH or our secure data center - is encrypted. Your data is encrypted with GPG before sending, so it never sits in the clear. You have a unique random encryption key assigned to you, and this key is stored by a service backed by Hardware Security Modules.
Some Remora Backup plans offer the ability to provide your own encryption key, rather than using one we generate for you. There are numerous benefits to providing your own encryption key, including compliance, the ability to rotate the key on your own schedule, and further limiting who has access to a key that can decrypt sensitive data. When you provide your own encryption key, even we at Remora have no access to your key as it is specified and managed completely on your helper app in a config variable.
Your backup is performed daily at a time you specify. For those using our secure storage partner, full database copies of your backup are retained for 7 days, 4 weeks and 12 months. Custom retention schedules are available as well.
For those using our secure storage partner, we allow you to access copies of your backup archives at any time using SFTP or SCP, and in an emergency we can even arrange for physical delivery if needed (additional cost may apply).
Our secure storage partner is HIPAA, PCI and SSAE16/SAS70 compliant, and our add-on is designed so your data flows directly from your Space in Heroku to them, never passing through a third-party unsecured. Additional info can be provided upon request.
The available application locations for this add-on are shown below, and depend on whether the application is deployed to a Common Runtime region or Private Space. Learn More
|Region||Available||Installable in Space|
Need a larger plan? Let our customer success team help! Learn more.
To provision, copy the snippet into your CLI or use the install button above.