Questions About Remora Backup?

We understand that our security model makes the initial setup of our add-on a bit more involved than others. But we’re standing by to help!

Book A Call With Us

Read the Article Before Install

Don’t install Remora Backup directly! Our add-on uses a helper app to give you complete control of your data flow so installation is a bit different than a typical add-on. Read the DevCenter article on how to install Remora correctly.

Enable Automated Dev / Failover Workflow

Using our Bring Your Own Storage plan, you are able to securely send the daily backup of your Postgres database to any server supporting SSH at the time you specify. You can then automate decryption and restoration of this database allowing you to have a failover or development / test application on a separate environment with data no more than 24 hours out of date.

An Offsite Copy of Your Data

Your data gets backed up daily to either your own server (supporting transfer via SSH) or our secure hosting partner off of AWS.

Peace of Mind in an AWS Outage

With Remora Backup, your Postgres data is stored off-AWS, giving you peace of mind in the event of a large-scale AWS outage.

Enterprise-Ready Backup

Remora Backup was designed with Heroku Private Spaces and Heroku Shield Spaces in mind. Our use of a backup Helper App allows for secure automated daily backups of your Postgres data - even in a Shield Space.

Your Private Data Kept Private

We utilize a Helper App within your Heroku Private or Shield Space (or within your account on the Common Runtime) that you control. Your Helper App transmits your backup data directly to your server or our secure storage partner so your data never flows through our add-on.

End-to-End Encryption

Every step of transmission of your data - from your Remora Helper App reading the data from your Postgres DB to its transmission to your server via SSH or our secure data center - is encrypted. Your data is encrypted with GPG before sending, so it never sits in the clear. You have a unique random encryption key assigned to you, and this key is stored by a service backed by Hardware Security Modules.

Provide Your Own Encryption Key

Some Remora Backup plans offer the ability to provide your own encryption key, rather than using one we generate for you. There are numerous benefits to providing your own encryption key, including compliance, the ability to rotate the key on your own schedule, and further limiting who has access to a key that can decrypt sensitive data. When you provide your own encryption key, even we at Remora have no access to your key as it is specified and managed completely on your helper app in a config variable.

Backup Retention

Your backup is performed daily at a time you specify. For those using our secure storage partner, full database copies of your backup are retained for 7 days, 4 weeks and 12 months. Custom retention schedules are available as well.

Recovery When You Need It

For those using our secure storage partner, we allow you to access copies of your backup archives at any time using SFTP or SCP, and in an emergency we can even arrange for physical delivery if needed (additional cost may apply).

The Compliance You Expect

Our secure storage partner is HIPAA, PCI and SSAE16/SAS70 compliant, and our add-on is designed so your data flows directly from your Space in Heroku to them, never passing through a third-party unsecured. Additional info can be provided upon request.