Incorruptible cloud backup
Your attendance records are critical. Cloud Backup keeps an encrypted, tamper-proof copy in a UK data centre so you can recover everything — even if your computer is lost, stolen, or destroyed.
Why cloud backup matters
Without cloud backup
- • Records exist only on your computer
- • Hard drive failure = permanent data loss
- • Theft or damage = no recovery
- • No off-site protection
- • Manual exports are easy to forget
With cloud backup
- • Automatic encrypted uploads every 2 minutes
- • Tamper-proof for 90 days (Object Lock)
- • Restore on any machine, any time
- • UK data centre (London)
- • Zero effort after setup
How it works
Subscribe to Cloud Backup
Choose the Standard + Cloud Backup plan. Your licence key activates cloud backup automatically in the app.
Your data is encrypted on your machine
Before any data leaves your computer, Custody Note encrypts it with AES-256-GCM using a key derived from your licence. Nobody — not even us — can read your data.
Encrypted backup uploaded to AWS
The encrypted file is uploaded to Amazon Web Services S3 in the London (eu-west-2) region using temporary, scoped credentials unique to your account.
Locked and tamper-proof for 90 days
AWS S3 Object Lock in Compliance mode prevents anyone — including AWS administrators — from deleting or modifying the backup for 90 days.
Restore any time
If you need to recover, open Settings in the app, click Restore from Cloud, and pick the backup you want. Your data is decrypted locally and restored.
SRA compliance and data isolation
Designed to meet the Solicitors Regulation Authority requirements for confidentiality and data protection.
Per-subscriber isolation
Each subscriber’s backups are stored under a unique, hashed prefix in S3. No subscriber can see or access another’s data.
Client-side encryption
Data is encrypted on your machine before upload. The server only ever sees ciphertext. Your encryption key never leaves your device.
Temporary, scoped credentials
AWS credentials are issued for just 15 minutes and only grant access to your own prefix. They cannot access any other subscriber’s data.
UK data residency
All backups are stored in the AWS London (eu-west-2) region. Data never leaves the United Kingdom.
Immutable storage
S3 Object Lock Compliance mode guarantees that backups cannot be altered or deleted for 90 days, even by AWS staff.
TLS in transit
All connections to AWS use TLS 1.2+. Unencrypted connections are explicitly denied by bucket policy.
Cloud Backup FAQ
- Can you read my backed-up data?
- No. Your data is encrypted on your machine with a key derived from your licence before it ever leaves your computer. We only store ciphertext.
- What happens if I cancel my subscription?
- Your existing backups remain in storage and are protected by Object Lock for 90 days. You can resubscribe and access them again. After 90 days without an active subscription, backups may be deleted.
- Can another subscriber see my data?
- No. Each subscriber has a unique, hashed storage prefix. AWS credentials are scoped to only allow access to your own prefix. There is no shared access.
- How do I restore from cloud backup?
- Open Custody Note, go to Settings, and click “Restore from Cloud”. You’ll see a list of your recent backups — pick one to restore. The app downloads and decrypts it locally.
- Does cloud backup work offline?
- Cloud backup uploads require an internet connection. The app will queue uploads when you’re offline and send them when you reconnect. Local encrypted backups continue every 2 minutes regardless.
- Where is my data stored?
- Amazon Web Services S3, London region (eu-west-2). Data never leaves the United Kingdom.
Protect your records today
Add cloud backup to your subscription for total peace of mind. Automatic, encrypted, incorruptible.