# Trust: who runs NeverWiped, where your data is, and what we have tested

A backup service asks for a lot of trust. This page answers the questions you should ask before giving it: who is behind it, where each piece of your data sits, what happens if we stop, and which checks were actually done, with their dates. Each answer links to the page that says it in full. Nothing here is a certification or a promise of availability.

## Who runs it {#who}

- NeverWiped is published by **YOOBOOST SAS**, a company registered in France. Its registration number, address and publication director are in the [legal notice](https://neverwiped.com/legal/notice).
- One person runs the service day to day: support, operations and releases. That is a real limit for a backup service, so the rest of this page explains what keeps working without us.
- To reach us: contact@neverwiped.com (anything), support@neverwiped.com (help with your account or a server), security@neverwiped.com (a vulnerability; the policy is on the [security page](https://neverwiped.com/security#report)). These mailboxes are on our own mail server, read by a person.

## Where your data is {#where}

| What | Where |
|---|---|
| Your backups, encrypted on your server before they leave it | Our storage server in France, at Ikoula (Reims), one repository per server, on two mirrored disks (RAID 1) encrypted at rest |
| The key that opens them | Your server and the recovery key you wrote down; never on our platform |
| Your account, billing and backup metadata (dates, sizes, path names) | Our platform, at Ikoula in France, on the same machine as the storage |
| Our own platform backup | Every night, encrypted, on the same machine; a second copy elsewhere is prepared but not running yet |
| E-mails we send you | Our own mail server in France (same provider); no outside e-mail service |
| Payments | None today: payments are not open, so no payment provider receives anything. When they open, the provider will be named in the [privacy policy](https://neverwiped.com/legal/privacy) first |

The machine is a dedicated server that also runs one other, unrelated project; NeverWiped has its own IP address, its own containers and its own TLS front end on it. The full list of who else is involved (certificates, the restic download) is on the [security page](https://neverwiped.com/security#subprocessors).

What this means, said plainly: there is **one copy** of your backups, in one place. It survives a failed disk, not the loss of that server. Your own server still holds the original, and you can keep a second copy yourself ([how](https://neverwiped.com/docs/if-we-disappear#own-copy)). All known limits: [security, known limits](https://neverwiped.com/security#limits).

## If NeverWiped disappears {#if-we-disappear}

Your backups are a standard restic repository. With the repository key on your server or your recovery key, plain restic reads them without our platform, our agent or an account, for as long as the storage answers; with your own copy, whatever happens to us. What stops (dashboard, alerts, scheduled backups) and what keeps working is listed on one page, with the exact commands: [if NeverWiped disappears](https://neverwiped.com/docs/if-we-disappear). Try it once while everything works: [test it today](https://neverwiped.com/docs/if-we-disappear#test).

## What we have tested, with dates {#tests}

Everything below was done by us, not by an independent firm. Each line links to what you can read.

| Date | What | Read |
|---|---|---|
| 2026-11-06 | Threat model of the agent, the storage gate, the platform and the back office (STRIDE), and a review of the code against the OWASP Top 10, with fixes | [security page](https://neverwiped.com/security#boundaries) |
| 2026-11-06 | Review of the dependencies and of how the agent is built and shipped, with a software bill of materials | [the agent and the install](https://neverwiped.com/security#agent) |
| 2026-11-09 | Scan of the whole repository for leaked secrets (gitleaks) | [on the platform](https://neverwiped.com/security#platform) |
| 2026-11-09 | Read-only scan of the live site and servers from outside (TLS, open ports, headers) | [on the platform](https://neverwiped.com/security#platform) |
| 2026-11-09 | Backup and restore speed measured with the real agent and the real storage software | [backup speed](https://neverwiped.com/docs/performance#method) |
| 2026-11-09 | Export and account-deletion drill on a full test stack, checked against the privacy policy | [privacy policy](https://neverwiped.com/legal/privacy) |
| Every release | The whole test suite, including end-to-end runs against a throwaway copy of the platform and the storage with real restic backups and restores | [changelog](https://neverwiped.com/changelog) |

## What has not been done {#not-done}

- **No external penetration test yet.** The scope is written; nothing has been ordered. When one is done, this page will give the firm's name (with its permission), the date and a summary.
- **No certification** and **no availability figure**: see [what we don’t claim](https://neverwiped.com/security#not-claimed).
- **No second site** for your backups yet ([one copy](https://neverwiped.com/security#limits)).

## Status and incidents {#status}

The [status page](https://status.neverwiped.com) shows the state of our main services, measured every few minutes, with any incident written by a person. It runs on the same machine as the service, so a full outage of that machine can hide it; the monitoring then alerts us by e-mail. If an incident touches your backups or your account, we write to you ([what we do](https://neverwiped.com/security#incidents)).

## Quotes and figures on this site {#quotes}

We show no logos, ratings or invented numbers. Two things may appear on the home page and below, and only when they are real:

- **Quotes** from people who use NeverWiped, sent from their client area with their written consent, word for word, with the month their account was opened and whether they were on the free trial or paying. We read each one before it appears; nobody is paid or rewarded for one; anyone can withdraw theirs at any time and it disappears within an hour.
- **A counter** of servers with a successful backup in the last 7 days, counted from our database every few minutes. It stays hidden until at least 50 servers on 20 different accounts are counted, and our own accounts are never counted.