Backup Locales

A backup locale is a logical destination where backups of your managed services are stored safely and reliably. Backups play a critical role in ensuring business continuity — they allow you to recover from data loss, corruption, or unexpected incidents like outages or accidental deletions. With a well-defined backup strategy, you can restore services quickly and reduce downtime during disaster recovery scenarios.

Each backup locale is associated with a specific set of cloud resources, giving you control over where backups are stored. This allows you to align backup storage with geographic or compliance requirements, or simply optimize for redundancy and accessibility.

Backup locales serve as the anchor for your backup configuration, regardless of whether your backups are of logical type (such as technology-native exports) or physical type (such as volume or disk snapshots). When using logical backups, your backups will be stored in your choosen object storage.

You can view and manage all backups performed within a backup locale. This includes listing available backups, identifying the managed service each backup belongs to, and deleting individual backups when they are no longer needed.

Each backup locale also provides a real-time status, helping you monitor its health and connectivity.

You also have fine-grained control over who can access and manage each backup locale within ScaleGrid. Access is governed by roles — only users with roles explicitly granted access to a backup locale will be able to use or modify it. This ensures secure delegation and limits exposure of sensitive backup configurations across teams.

To improve organization and searchability, you can assign labels to each backup locale. These labels help you quickly locate and filter resources across your ScaleGrid environment. In the case of physical cloud-based backups, these labels are also propagated to the underlying cloud resources, giving you consistency and traceability across both your internal view and your cloud infrastructure.

Encryption and Security

Encryption is critical to protecting your data both during transfer and while stored. ScaleGrid supports two key types of encryption:

• Encryption in transit — protects your data while it’s moving between systems (e.g., between your service and a backup locale).
• Encryption at rest — secures your data while it’s stored on disk or in object storage.

In Dedicated Hosting (DH) environments, both encryption in transit and at rest are fully enforced by ScaleGrid:

• All data transfers are protected using publicly signed TLS certificates, which are automatically rotated every 90 days.
• Data is always encrypted at rest using secure, platform-managed encryption mechanisms.

In Bring Your Own Cluster (BYOC) setups, encryption behavior depends on how your storage systems are configured:

• Encryption in transit is only guaranteed if your underlying storage (e.g., S3-compatible endpoint or discsnapshot) is correctly configured with a valid certificate and enforces HTTPS connections.
• Encryption at rest depends entirely on the encryption policies of the storage backend you connect to the backup locale.

If you are running a BYOC deployment and are unsure about the encryption status of your storage configuration, please reach out to our support team for guidance. We’re happy to help you evaluate and improve the security of your setup.