Encrypted before upload. Each repository has its own key, and object names are keyed hashes, so the storage provider learns nothing about what it holds.
Integrity on every read. Every chunk and snapshot is checked against its hash; verification jobs can read every byte.
Recovery without us. Owners can reveal the recovery key, and the format is self-contained: with the key and the bucket, the data is yours.
Bring your own storage. Amazon S3, Wasabi, Cloudflare R2, Backblaze B2, Azure, Google Cloud, SFTP or any S3-compatible storage.