Canadian Hosted Storage
Backup objects, and any secondary replicas in your plan, stay within contracted Canadian data centres, operated by a Canadian company. You always know where your recovery data lives.
Cloud Storage · Canadian S3 Backup
Arcadion Sovereign Vault
Your data. Your backups. Your Canadian cloud.
One of the first S3-compatible cloud backup platforms built, hosted and managed by a Canadian cloud company. Send Veeam and other backups to immutable, Canadian-hosted object storage, protected end to end by Cloudflare Zero Trust.
- Canadian Hosted
- S3 Compatible
- Built for Veeam
- Object Lock Immutability
- Cloudflare Zero Trust
Canadian Hosted
Backup objects stay in Canadian data centres.
S3 Compatible
Standard endpoints, buckets and credentials.
Immutable by Design
S3 Object Lock and WORM retention.
330+ Edge Cities
Cloudflare's accelerated global network.
Keep your backups in Canada.
Keep your business protected.
Your backup strategy is only as resilient as the infrastructure protecting your recovery data. On-premises repositories can be exposed to ransomware, hardware failure, theft, accidental deletion or regional disasters. Sovereign Vault adds an independent storage location outside your production environment.
Whether you are extending an existing Veeam infrastructure, protecting critical business servers or building a stronger disaster recovery plan, Arcadion gives you a Canadian off-site destination that fits your existing backup workflows, with no foreign hyperscaler required.
Explore pricingWhy Sovereign Vault
Built for recovery, not just storage
Immutable Backup Protection
S3 Object Lock and write-once, read-many (WORM) retention help safeguard recovery points from unauthorized changes and premature deletion, including ransomware.
Built for Veeam Backup & Replication
Add an S3-compatible off-site target to your Veeam environment as direct object storage or a scale-out backup repository capacity tier.
Enterprise Storage Resilience
Distributed storage with erasure coding protects data against disk and node failures. Optional replication to a second Canadian site adds geographic resilience.
Encryption and Controlled Access
Encrypted in transit through Cloudflare Zero Trust, encrypted at rest in the vault, with scoped credentials and access policies for each backup application and administrator.
Predictable, Scalable Capacity
Start with an allocation sized to your backup footprint and grow with your workloads and retention. Simple per-terabyte pricing in Canadian dollars, with no API request fees.
Zero Trust connectivity · Powered by Cloudflare
Zero Trust in front of every byte.
Sovereign Vault is never exposed directly to the internet. Cloudflare's Zero Trust platform and WARP tunnel system sit in front of our sovereign cloud: every backup session is verified, tokenized and encrypted from source to destination, then carried over Cloudflare's accelerated global network to our Canadian vault.
01 Source
Your Site
Veeam, servers, NAS and apps
02 WARP
Encrypted On-Ramp
WARP client or connector encrypts traffic at the source
03 Cloudflare edge
Verify & Tokenize
Identity, device and Access policy checks; signed, short-lived tokens
04 Tunnel
Outbound-Only Link
Cloudflare Tunnel - no open inbound ports on the vault
05 Vault
Sovereign Vault
Canadian-hosted, immutable, encrypted at rest
Encrypted in transit end to end. Your backup application's own TLS session stays intact inside the tunnel.
Cloudflare carries the traffic. Your data is stored only in Canada.
No Exposed Storage Endpoint
Cloudflare Tunnel connects the vault to Cloudflare's edge outbound-only. There are no open inbound ports on the storage platform for attackers to scan or target.
Tokenized, Identity-Aware Access
Every connection is authenticated with Cloudflare Access policies and signed, short-lived tokens, layered on top of your scoped S3 credentials. Unknown users and devices never reach the vault.
Encrypted from Source to Destination
Backup data travels inside WARP's encrypted tunnel to the edge, through Cloudflare Tunnel to the vault, and lands under encryption at rest. It is never in the clear on the public internet.
Accelerated Global Network
Traffic rides Cloudflare's optimized backbone across 330+ cities worldwide, routing around congestion for faster, steadier backup and restore transfers.
Canadian Edge, Global Reach
Cloudflare data centres in Toronto, Montreal, Vancouver, Calgary, Winnipeg and Saskatoon keep Canadian sites close to the vault, while remote offices and admins connect securely from anywhere in the world.
High Availability and Visibility
Redundant tunnel connectors and Cloudflare's anycast network remove single points of failure on the access path, and every session is logged for audit and investigation.
Sovereignty option: Cloudflare Regional Services can restrict TLS processing to data centres physically located in Canada, keeping the entire path, not just the storage, on Canadian soil.
How it works
From first connection to first restore
Connect
We provision your bucket, scoped credentials and Cloudflare Zero Trust access. Point your backup platform at your Arcadion S3 endpoint.
Transfer
Backups travel encrypted through WARP and Cloudflare's accelerated network into Canadian-hosted object storage.
Protect
Versioning, access controls and Object Lock immutability are applied to suit your backup application and retention policy.
Restore
Recover through your backup application whenever you need to, with Arcadion engineers in Ottawa ready to help.
Use cases
One Canadian cloud.
Multiple backup workloads.
Veeam off-site repositories
A geographically separate destination for Veeam backup copies and immutable repository designs.
Virtual machines & servers
Protect VMware, Hyper-V, Windows and Linux infrastructure through compatible backup software.
Business files & NAS
Store backed-up file shares, document libraries and NAS datasets with S3-capable backup tools.
Databases & applications
Retain application and database backup exports using compatible backup or integration tooling.
Disaster recovery & continuity
Keep independent recovery data to withstand ransomware, infrastructure incidents and site failures.
IT providers & multi-site teams
Support many sites or customers with isolated allocations, scoped accounts and clear access boundaries.
Let's build a better digital world together.
Our experts will guide you through the complex world of technology and cybersecurity.
PROTECT YOUR ORGANIZATION TODAYFrequently Asked Questions
Can't find your answer? Our cloud team is in Ottawa and happy to walk through your backup design.
GET IN TOUCHIs Sovereign Vault the same as Amazon S3?
No. Sovereign Vault is independently hosted Canadian object storage with an S3-compatible interface. Any application that supports the relevant S3 APIs can use it.Can I use it with Veeam?
Yes. Sovereign Vault is designed for Veeam Backup & Replication S3-compatible repositories. Arcadion validates your Veeam version, repository mode and Object Lock behaviour during onboarding.Why is Cloudflare in front of the vault?
Cloudflare Zero Trust means the vault never has a public, scannable endpoint. Every session is verified by identity, device and token before it is allowed through an outbound-only Cloudflare Tunnel, and Cloudflare's accelerated network keeps transfers fast from anywhere in Canada or the world.Does Cloudflare store my backup data?
No. Cloudflare carries encrypted traffic between your site and the vault; your backup objects are stored only in Arcadion's Canadian infrastructure. Regional Services can further limit Cloudflare's processing to Canadian data centres.Are backups protected against ransomware?
S3 Object Lock and immutability prevent early deletion or alteration of protected objects. A complete ransomware strategy also needs isolated credentials, endpoint security, monitoring and tested restores, all of which Arcadion can help with.Does my data leave Canada?
Your backup objects and any contracted secondary copies are stored in Canada. Commitments covering logs, keys and support access are set out in your service agreement.Does Arcadion manage my backups?
With S3 Storage, Arcadion manages the storage platform and you manage your jobs. Choose Managed Backup and our team handles configuration, monitoring, restore testing and recovery assistance.Can I expand storage?
Yes. Capacity grows with your plan; Arcadion confirms allocation and growth procedures in your service terms.
Request a storage quote
Your Data. Your Control.
Your Canadian Cloud.
Protect your critical backups with immutable Canadian-hosted storage, secured by Cloudflare Zero Trust. Get a tailored storage quote for your business.