Skip to content
NeverWipedStart free14 days · no card

Spec sheet · Linux server backup

Your server, backed up with one command.

Automatic, encrypted backups for your Linux server: files, databases and Docker volumes. Encrypted on your machine, stored in France. Install in one line. Restore any night in one more.

curl -fsSL https://neverwiped.com/install.sh | sh

You’ll need an API key from your free account. The script checks the agent’s SHA-256 fingerprint before installing. Read the script first

No card. Cancel anytime. From €4.90/month incl. VAT

Diagram 00 · the path of a backup

Your server encrypts the data with a key that never leaves your machine, then sends it over TLS to append-only storage in France. Restores are decrypted on your machine.YOUR SERVER/etc · /var/wwwPostgreSQL · MySQLDocker volumesneverwiped agentENCRYPTIONrestic · AES-256key: stays hereTLSSTORAGE · FRANCEencrypted repositoryappend-onlyencrypted disksunreadable without your keyrestoredecrypted locally
  1. One command.

    Paste it, read the plan, done. The agent finds your sites, databases and Docker volumes, schedules itself and runs the first backup.

  2. Encrypted on your server.

    Data is encrypted before it leaves your machine, with a key that never leaves it. We only ever receive locked blocks.

  3. Restore in minutes.

    One command brings a night back, into a separate folder so nothing gets overwritten, or in place after you confirm.

Systems
Debian · Ubuntu · RHEL and derivatives · Alpine
Architectures
amd64 · arm64
Engine
restic 0.18.1, SHA-256 verified
Scheduling
systemd · cron · BusyBox

01 · How it works

Three steps. Then the agent takes it from there.

  1. Account and API key

    Sign up, confirm your email, create an API key in the dashboard. No card.

    nw_acc_••••••••
  2. Install and plan

    The script verifies the agent’s fingerprint, finds your sites, databases and Docker volumes, and asks you to approve the plan. Your recovery key is shown once.

    neverwiped install
  3. Automatic backups

    Every night or every week depending on the plan, at a fixed time. Only changes are sent, compressed and deduplicated.

    neverwiped status

02 · Encryption

Follow one file from disk to France.

Four steps, four answers to the same question: who can read it at this point?

Three machined black blocks on a grid mat, the middle one with an orange padlock-shaped cutout.

Follow one file

Follow one file

invoice-1042.pdf, shop.sql, nginx.conf: readable, on your machine.

Readable by: you

restic splits and encrypts everything with AES-256, using a key created on your server. The key never leaves it.

Readable by: you (with the key)

Only locked blocks travel, over TLS, straight to the storage server. They do not pass through our platform.

Readable by: no one on the way

The blocks sit on append-only storage in France, on encrypted disks. We see dates, sizes, the server name and the folders in your plan. Never what is inside.

Readable by: you, with your key. Not us.

03 · Restore

Pick a night. Get the exact command.

Your saved nights sit on a timeline, one track per kind of data. Pick a night and what you need: the page writes the command you would type.

vps-prod · sample

Saved night

What to bring back

The command

neverwiped restore 2026-10-282026-10-292026-10-302026-10-312026-11-012026-11-022026-11-03 --include /var/www --include /var/lib/neverwiped/dumps --include /etc --target /root/restore

What happens

  • Every saved path comes back under /root/restore: /var/www/site/index.html lands in /root/restore/var/www/site/index.html.
  • Database exports arrive as .sql files in /root/restore/var/lib/neverwiped/dumps, with the re-import commands shown at the end.
  • Nothing is re-imported automatically. Nothing live is touched.
  • Only /var/www comes back, under /root/restore/var/www.
  • Compare, then copy what you need: diff -r /root/restore/var/www/site /var/www/site
  • Nothing live is touched.
  • .sql exports (postgresql-local.sql, mysql-local.sql, or one per Docker container) land in /root/restore/var/lib/neverwiped/dumps.
  • The agent shows the re-import command, for example runuser -u postgres -- psql postgres < /root/restore/var/lib/neverwiped/dumps/postgresql-local.sql
  • Nothing is re-imported automatically: check the file, stop the app, then import.
  • Only /etc comes back, under /root/restore/etc.
  • Copy back the one file you need rather than the whole of /etc.
  • Nothing live is touched.

In place instead? Drop --target. The agent lists what will be overwritten and only goes ahead once you type the confirmation.

Sample nights on Pro (one backup a night) for a server called vps-prod. On Essentiel, one restore point a week. Not sure which night? neverwiped list shows every saved one.

04 · Security

We can’t read your backups. By design.

Security specifications
encryptionon your server, before upload (restic, AES-256)
repository keygenerated on the server, never sent to us
recovery keyshown once, kept by you alone
storageappend-only day to day: your server can add backups, not delete them; pruning at most once a week, and you can pause it
transportTLS (HTTPS)
at restencrypted disks, on top of restic
locationbackups stored in France; account data on our platform, hosted in the EU
GDPRDPA, record of processing, account export and deletion

Known limit

We never hold your key. So we can’t read your backups, can’t decrypt them for you and can’t recover the key if you lose it.

Lose the server and the recovery key, and the backups become unreadable, by you or by us. Store the key in a password manager right after install.

Every known limit, stated plainly, on the security page

05 · No lock-in

The “if we disappear” test.

A fair question before you trust anyone with backups. Flip the switch and walk the exit, calmly, before you ever need it.

Today NeverWiped runs your backups on schedule, emails you if one fails, and lists every date in your dashboard.

Gone No more dashboard, no more emails. Your data isn’t stuck in our format. Here’s the way out.

Flip the switch to see the four exit steps.

  1. Step 1 of 4

    It’s a standard restic repository

    Your backups aren’t in a NeverWiped format. They are a plain restic repository, encrypted with your key. restic is open source: anyone can install it.

  2. Step 2 of 4

    Pull a full copy, any time

    One command brings the latest backup back into a folder you control. Do it now and then: a copy on your own disk doesn’t depend on us at all.

    neverwiped restore latest --target /root/restore
  3. Step 3 of 4

    Open it with restic alone

    No agent, no dashboard. Install restic 0.18.1, give it your recovery key and the repository address, then list or restore your backups, as long as the repository is reachable.

    curl -fsSLO https://github.com/restic/restic/releases/download/v0.18.1/restic_0.18.1_linux_amd64.bz2
    echo "680838f19d67151adba227e1570cdd8af12c19cf1735783ed1ba928bc41f363d  restic_0.18.1_linux_amd64.bz2" | sha256sum -c
    bunzip2 restic_0.18.1_linux_amd64.bz2 && install -m 0755 restic_0.18.1_linux_amd64 /usr/local/bin/restic
    
    umask 077
    printf '%s' 'YOUR-RECOVERY-KEY' > /root/recovery.key
    export RESTIC_REPOSITORY='rest:https://LOGIN:PASSWORD@STORAGE_HOST/LOGIN/'
    export RESTIC_PASSWORD_FILE=/root/recovery.key
    restic snapshots
    restic restore latest --target /root/restauration
    rm -f /root/recovery.key
    
    From the restore guide, “If the server is lost”. Replace the capitals: your recovery key, and the storage login, password and host, kept on your server in /etc/neverwiped/config.json. arm64: use restic_0.18.1_linux_arm64.bz2 and its fingerprint from the docs.

    Read the full exit guide: restic alone, and your own copy

  4. Step 4 of 4

    Leave whenever you like

    Monthly, no commitment. Cancel from the dashboard: the service runs to the end of the period you paid for.

06 · Monitoring

One status, every morning.

Everything the agent knows fits in one command. Run a backup from the card and watch it land.

  • Email when a backup fails
  • Email when no backup has run for a while
  • Email before the quota is reached
The parts of a small rack server laid out in neat rows on a grey grid mat, one orange part.
$ neverwiped statushealthy
Server
vps-prod
Plan
Pro (active)
Backups
daily, active
Last
2026-11-04 02:16 · succeeded · 3.3 MB added
Next
tonight, about 02:16
Storage
France · append-only
Scheduling
systemd timer

Sample values. In real life this is what neverwiped status prints, and what your dashboard shows.

07 · Pricing

Three plans. Monthly, VAT included, cancel anytime.

Essentiel

€4.90/month incl. VAT

1 server

frequency
weekly
retention
4 weeks
storage
20 GB
servers
1
Start free, then Essentiel

No card. Cancel anytime.

Pro

Recommended

€9.90/month incl. VAT

€3.30 per server with 3 servers

frequency
daily
retention
30 days
storage
100 GB
servers
3
Start free, then Pro

No card. Cancel anytime.

Business

€19.90/month incl. VAT

€1.99 per server with 10 servers

frequency
daily
retention
90 days
storage
500 GB
servers
10
Start free, then Business

No card. Cancel anytime.

Every plan starts with a 14-day free trial: no card, Essentiel features, up to 5 GB. Storage is shared across your servers.

08 · AI agents

Docs written for your assistant, too.

The “For AI agents” page gives Claude Code, Codex or Cursor the full non-interactive procedure: prerequisites, install with --yes, output lines to check, and a test restore into a separate folder. It forbids in-place restores without your approval and keeping the recovery key.

Every page is available in Markdown, and the index fits in llms.txt.

neverwiped.com/ai-agents · agents-ia.md · llms.txt

docs.neverwiped.com/llms.txttext/plain

# NeverWiped

> NeverWiped backs up a Linux server (files,
> PostgreSQL/MySQL/MariaDB databases, Docker volumes)
> with one command, encrypted on the server before
> upload, stored in France.

## Documentation

- Quickstart
- Command reference
- Restore
- For AI agents
- FAQ

09 · FAQ

Questions, answered straight

Can you read my backups?

No. Your data is encrypted on your server by restic (AES-256) before it is sent, with a key generated on your server that never leaves it. We only ever receive locked blocks, and we know neither that key nor your recovery key.

Why pay when I could script it myself?

You could. For €4.90 a month, or €3.30 per server on Pro, you skip the weekend of scripting and get encryption done right, append-only storage in France, consistent database dumps, an email when a backup fails or stops running, and a restore path that is documented and tested.

My host already does snapshots. Why add this?

Snapshots usually live with the same provider and the same account as your server. NeverWiped keeps an encrypted, append-only copy somewhere else, with consistent database dumps and a restore you control file by file.

What if NeverWiped disappears?

No lock-in. Your backups are a standard restic repository and the key is yours. Any time you like, one command pulls a full copy back to a folder, and the open-source restic tool can read the repository too. No commitment: you can cancel whenever you want.

Will the restore work the day I need it?

Restoring is one command: pick a date, get your files back in a separate folder, compare, copy. The docs show how to test it on day one. Even if a payment fails, restore stays open until deletion, which is always announced by email first.

Can my AI assistant install it?

Yes. Give it the “For AI agents” page: non-interactive commands, the expected output and the checks. It asks you for one thing (an API key) and hands you one thing (your recovery key, which it must not keep). It never restores in place without your OK.

Where is my data stored?

Your backups (the content of your server) are encrypted on your server and stored in France, on encrypted disks; they never pass through our platform. Your account data (email, billing, backup dates, sizes and server names) lives on our platform, hosted in the EU; details in the privacy policy.

What if I lose my recovery key?

While your server runs, nothing changes: the agent uses its own key. If you lose both the server and the recovery key, the backups can’t be read, by anyone. Put the key in your password manager on day one.

Can an attacker who gets root delete my backups?

Not with your server’s day-to-day credentials: storage is append-only. But old backups are pruned at most once a week with a separate login valid for one hour, and someone with root on your server could request it too, or add fake backups so that pruning removes real ones. Pause pruning for a server and no login that can delete is issued for it. Each server has its own keys, so your other servers are not affected. Every known limit is listed on the security page.

How does the free trial work?

14 days, no card, on the Essentiel plan, up to 5 GB. If you don’t subscribe, new backups stop, restore stays possible until the trial data is erased, 7 days after the end.

Set it up once. Restore any night.

14 days free. No card. Cancel anytime. Then from €4.90/month incl. VAT.