Backup · restore-first database protection

Backups you can prove will restore

Most tools verify the dump ran. Norcube verifies it actually restores: automated tests recover each backup into a throwaway database and confirm the data came back, with a restore-health score and alerts when anything fails or silently stops.

Automated restore testing Restore-health score Failure alerts in every plan PostgreSQL & MongoDB Gzip download Free tier included
scheduled backup waiting
3 data sources
0 completed
0 B total size
PG prod-postgres 2.4 GB
MDB analytics-mongo 890 MB
PG users-postgres 1.1 GB
01 restore testing

We test your restores, not just your dumps.

A green "backup succeeded" only proves the dump ran. Norcube automatically restores your backups into a disposable database, confirms the data actually came back, and tears it down — on a schedule, on a sample of backups, or on demand. Connecting takes a minute: paste a connection string, pick a schedule, and every following backup can prove itself.

  • Restore drills into a throwaway database — never the one being backed up
  • Passed badge per backup, restore-health score per database
  • Alerts when a backup fails, a test can't confirm your data, or a schedule silently stops
Try Backup free
prod-postgres · restore health
tested 2h ago
96%
27 / 28 restore drills passed every drill restores a real backup, then throws the copy away
passed passed w/ warnings failed → alerted
security

Security is not an add-on. It is the foundation

Your database credentials and backup data are treated as the most sensitive assets they are — encrypted at every stage, isolated in every process.

principle 01

Credentials never in plain text

Encrypted on input, stored encrypted at rest, decrypted only in an isolated server during the backup job. Never transferred unencrypted.

principle 02

Encrypted archive storage

Archives stored with AWS server-side encryption. Client-side encryption coming soon — your data encrypted before it leaves the sandbox.

principle 03

Isolated execution

Every job runs in its own sandboxed server — no shared processes, no shared memory. Destroyed after the job completes.

What it does

Simple backups, no surprises

05

Multiple data sources

Configure as many databases as you need — production, staging, client databases. Each gets its own schedule and backup history.

06

Gzip download

Every backup is stored as a compressed gzip archive. Download from the dashboard whenever you need it — no lock-in, no proprietary format.

07

Configurable schedules

Set backup frequency based on your needs. Hourly for critical production databases, daily for staging environments, or anything in between.

09

Encrypted storage

Backup archives are stored in S3 with AWS-managed server-side encryption. Client-side encryption inside the Fargate task is coming soon — your data encrypted before it even leaves the sandbox.

11

MySQL & Redis · coming soon

MySQL and Redis support is in development. Same simple workflow — add connection, set schedule, download when needed.

Pricing

Pay for what you use. Nothing more

Two metrics — job runtime and storage. Both start with a free tier. Volume discounts kick in automatically as you grow.

Free tier: 1 hour / month

Billed per second of backup job execution. The clock starts when the isolated server begins your backup and stops when it finishes. The first hour each month is free.

Job runtime — Per-second billing for backup job execution time.
First 1 hr / month Free
1 – 20 hrs / month $0.18 / hr
20 – 100 hrs / month $0.144 / hr
Over 100 hrs / month $0.108 / hr
Common questions

Questions, answered

Quick answers to what teams ask us most about Backup. Need something else? Email [email protected].

Which databases does Backup support?
PostgreSQL and MongoDB. Connect any standard instance — managed (RDS, Atlas), self-hosted, or running in your own cluster — and Backup handles the rest.
How do I schedule backups?
Cron expressions, with timezone awareness. Backup policies bundle the schedule with compression, encryption, retention, parallelism, and bandwidth throttle — attach a policy to a data source and it runs automatically. You can also trigger a backup manually any time.
What backup methods are available?
Logical dumps (pg_dump for Postgres, mongodump for MongoDB) — portable, compressed archives you can restore anywhere, in-product or with the standard tools. Physical backups and point-in-time recovery (continuous WAL/oplog archiving) are on the roadmap.
How long are backups kept?
Two retention dials you set per backup policy, enforced together: age (how many days to keep a snapshot) and count (a minimum number of recent snapshots to always keep). Either limit ejects older snapshots automatically. You choose both, so the same data source can have a daily/7-day policy and a weekly/1-year policy side by side.
Can I restore from within Norcube, or do I have to download the dump?
Both. Every snapshot is downloadable as a gzip archive for restore on your own machines. In-product restore is also built in, with three target modes: restore into a new database, overwrite the existing one, or restore onto a new server you provision — each with a pre-flight check that the target is writable.
How do I know a backup will actually restore?
Restore testing proves it. Norcube automatically restores a backup into a throwaway database — one it spins up for the test (nothing for you to provide) or a scratch server you nominate — confirms the data came back, and tears it down. Run it on a schedule, on a random sample of backups, or on demand; a Passed badge and a restore-health score show recoverability at a glance. And it is honest: if a backup restores but one object cannot be rebuilt (say an index too large for the engine), it is flagged as passed-with-warnings rather than a bare pass, so you see the caveat instead of just a green check. Restore tests only ever restore into a fresh throwaway database, never the one being backed up.
How are credentials and backup files protected?
Database credentials are stored encrypted using AWS KMS envelope encryption. Backup artifacts are encrypted at rest in S3 with KMS by default (SSE-S3 and client-side encryption are also supported). Connections to your database use TLS where the engine supports it. All processing happens in EU infrastructure under GDPR.
Quickstart

Backup your first database in five minutes

Three required steps, two optional. Norcube takes care of the encryption, scheduling, retention, and the moment you regret deleting the wrong row.

About 5 min
  1. Add a data source

    Open Data sources → Add and paste your PostgreSQL or MongoDB connection details. Credentials are encrypted with AWS KMS the moment you save them; the cleartext never touches our database.

  2. Create a backup policy

    Pick a cron schedule (e.g. 0 2 * * * for nightly at 2 a.m.), retention (choose how many days to keep snapshots, plus a minimum recent count to always keep), compression (gzip or zstd), and encryption mode (SSE-KMS by default). One policy can serve many data sources.

  3. Attach the policy to the data source

    Link them together and choose the storage destination region. The scheduler picks the attachment up on the next tick — no redeploy, no manual cron.

  4. Run it manually to verify (optional)

    Hit Run now to trigger an immediate backup. You will see the job state move queued → running → success, with a downloadable artifact at the end. Use this to confirm credentials and network reachability before relying on the schedule.

  5. Restore or download (optional)

    Every successful job leaves an encrypted artifact you can download as a gzip archive, or restore in-product into a new database, the existing one (overwrite), or a fresh server you provision. Three target modes, each with a pre-flight writability check and a full restore log.

Ready when you are

Stop worrying about database backups

Free tier included. No credit card required. Add your first data source and schedule a backup in under a minute.

Free tier Get started at no cost
No credit card Start building now
Standard formats pg_dump & mongodump as gzip
Download anytime Your data, no restrictions
// tick. tick. tick.
0 ticks since founding