Skip to main content

Immutable Storage · Pro & Enterprise

Even ransomware can’t overwrite a WORM-locked backup.

Write-Once-Read-Many immutable storage. Lock backups for a defined retention period — they can’t be modified, deleted, or overwritten by anyone, including admins. SEC 17a-4 / FINRA / HIPAA / SOC 2 audit-ready.

Data Protection — WORMlocked
ModeProtected — Governance
Retention1 year · immutable
Admin deleteBlocked
Object-lock retention — nobody can modify, delete or overwrite. Audit-ready.
What WORM Means

Write once, read many.

Once a backup is written, it becomes immutable for a defined period. Not even an admin with full credentials can modify or delete it — it’s object-lock at the storage layer. Why it matters: ransomware that compromises an admin account can delete or encrypt your cloud backups (it has happened). WORM-locked backups can’t be touched. The last clean image survives.

  • Immutable for a defined period once written
  • Object-lock at the storage layer — admins can’t override it
  • The last clean image survives a full admin-account compromise
WORM-locked recovery point surviving ransomware in BigMind Recovery ShieldClick to enlarge

Compliance Frameworks

Infrastructure framework — not report templates.

WORM-immutable storage plus audit-log export covers the underlying posture for the frameworks teams get asked about. Pre-built compliance report templates are roadmapped, not at launch.

SEC 17a-4

Broker-dealer records, immutable. ✓ Audit-ready.

FINRA

Same retention requirements. ✓

HIPAA

PHI integrity (does not require WORM but supported). ✓ Infrastructure framework.

SOC 2 Type II

Change-management evidence. ✓

GDPR Article 17

Right to erasure (separate compliance erasure flow). ✓

Retention Lock

Set duration, then extend only.

Set retention duration per workspace, per backup policy, or globally — anything from 1 day to 7 years and beyond. Once set, the lock can only be extended, never shortened. Admins receive notification when high-retention objects are about to lock.

  • Per-workspace, per-policy, or global retention
  • 1-day to 7-year+ durations supported
  • Lock can be extended, never shortened
  • Admins notified before high-retention objects lock
Retention lock policy configuration in BigMindClick to enlarge

Tier Availability

Pro and Enterprise only.

WORM immutability is a Resilience Pro and Enterprise feature.

Resilience Pro

✓ included.

Resilience Enterprise

✓ included.

Resilience DR-Only / Standard

✗ Upgrade to Pro to unlock WORM.

BigMind DR (Free / Plus / Pro)

✗ Resilience-only feature.

Immutable backups for compliance and ransomware survival.

Lock the last clean image so nobody — not an admin, not ransomware — can touch it.