Offsite backup for small businesses
Confidential records, kept confidential.
Private Archive is encrypted offsite backup for accountants, consultants, clinics, and other small businesses that hold sensitive client information. Your files are encrypted on your own device before they leave it. We see ciphertext only.
- Open-source clients
- Reproducible builds
- No accounts, no passwords
- No PII collected
How it works
Three steps. Your data is unreadable to us at every stage.
-
1
Encrypted on your device
The desktop client uses Restic to encrypt every file locally before it leaves your machine. Encryption keys never travel to our servers.
-
2
Routed over Tor
Backups travel to our servers over the Tor network, so your office IP address is not part of the transaction. We have no record of where you connect from.
-
3
Settled in Monero
Billing is metered in Monero (XMR). There is no credit card on file, no billing address, no invoice trail tied to your business name.
What we never see
Privacy is the product. Everything below is a design constraint, not a setting you have to enable.
- Your name, business name, or contact details
- Email addresses or phone numbers
- Your IP address or geographic location
- Device fingerprints or operating-system telemetry
- File names, folder structure, or content
- Payment cards or bank details
This design philosophy is aligned with how EU privacy law expects confidential business records to be handled: the safest data is the data we never collect.
Pricing
Pay-as-you-go in Monero. Top up a balance when you need to; the balance is consumed by the second of storage and any restore traffic. No subscription, no minimum commitment, no card on file.
Download the client
Open-source, reproducible builds. Verify your download against the SHA256SUMS file before installing.
For the people who advise our clients
Will my IT advisor approve this?
Likely yes. Encryption happens on the endpoint with Restic, an audited backup engine. Transport is over Tor. The clients are open source with reproducible builds, which means your advisor can independently verify what you are running.
Is this GDPR-aligned?
We design to the principle of data minimisation: we collect no personal data. That is the spirit of GDPR. We are not making a formal certification claim; we are telling you what we do and do not collect, so your DPO can make an informed call.
What if I lose my certificate?
The data is unrecoverable. We mean this plainly. Treat the certificate like the master key to your filing cabinet: store a sealed copy offsite, and rotate access when staff change.
How do I pay if I’ve never used Monero?
The desktop client walks you through it. Most small firms top up a small balance once a quarter and forget about it. There is no auto-renewal and no card on file.