v1.4 — any file, any folder, any database

Encrypted backups that quietly just work.

Point CalmBackup at any file, folder, or database — Postgres, MySQL, MongoDB and friends are auto-detected. Everything is sealed with a key only you hold before it leaves your machine. Then a calm weekly email, and nothing else.

1.3M backups run this month aes-256-gcm · end-to-end encrypted Files · folders · databases
[ two ways to drive it ]

Pipe it into a cron job, or sit inside a live dashboard in your terminal. Same binary.

non-interactive · cron / ci
~/acme — calmbackup
# nightly — cron
$ calmbackup run prod
→ postgres:acme dumped (412 MB)
→ files:uploads synced (3.8 GB)
→ encrypted · uploaded · 2 regions
ok (38.4s) — sha256:9f3c…e1a2
interactive · calmbackup status
~/acme — calmbackup status
Calm Backup Encrypted. Automated.
Status
Last backup Apr 18, 03:00
Local 20 files · 60 MB
Cloud 10 backups
Retention 7 days
Database Postgres
Path .calmbackup
Recent Backups
Filename Location
bk-20260418.enc Local+Cloud
bk-20260417.enc Local+Cloud
bk-20260416.enc Local+Cloud
bk-20260415.enc Cloud
bk-20260414.enc Cloud
[ how it works ]

Set it up on a Tuesday. Forget about it by Wednesday.

Three small decisions, then CalmBackup does the worrying. Encrypted before it leaves your machine, verified after it lands — you only hear from us when something actually needs a human.

01

Group your project into a single source.

A source is one project — its database and the folders that go with it. CalmBackup snapshots them together, so restores line up exactly the way your app expects.

Add as many sources as you run. Point-and-click, no cron syntax, no YAML if you don't want it.

~4 min to a first working source
your sources 3 projects · 6.3 GB total
acme-prod
The main SaaS
3 parts
  • Postgres acme_production 1.2 GB
  • /var/app/uploads 3.8 GB · 2,041 files
  • /var/app/exports 412 MB
acme-blog
Marketing site
2 parts
  • MySQL ghost_blog 88 MB
  • /srv/ghost/content/images 614 MB
internal-wiki
Staff notes
1 parts
  • /srv/wiki/data 220 MB
2 of 3 selected · snapshotted together Add source →
02

Encrypted before it ever leaves.

Every file, folder, and database you point us at is sealed with AES-256-GCM on your machine, using a key only you hold. We move ciphertext. We store ciphertext. We can't read it — even if we wanted to, even if someone compelled us, even if our database walked out the door.

  • Zero-knowledge — we never see your key
  • Content-hashed, so tampering is obvious
  • Verified restores into a sandbox, on a schedule
your files plaintext
  • /Projects/launch/
    48 files · 214 MB
  • brand-guidelines.pdf
    2.1 MB
  • hero-v3.jpg
    3840×2160 · 4.8 MB
  • customers.csv
    12,408 rows
  • orders @ postgres
    1.2 GB · auto-detected
readable · on your machine
aes-256-gcm
your key
encrypted ciphertext
000000009e3779b13c6ef362
9e3779b100000000a2598ad3
3c6ef362a2598ad300000000
daa66d13449114a2e6c89e71
unreadable · anywhere else
we see
ciphertext
you keep
the key
standard
AES-256-GCM
03

Then: silence. The productive kind.

No daily "backup succeeded" pings. One calm Sunday email with the week at a glance. A real notification only when something actually needs your attention — and more often than not, we've already fixed it by the time you read about it.

On average, customers think about backups once every 47 days — usually to recommend us to a friend.

inbox / from reports@calmbackup.com last 12 weeks
Apr 14 ✓ Weekly backup report — all green
Apr 07 ✓ Weekly backup report — all green
Mar 31 ✓ Weekly backup report — all green
Mar 24 Automatic retry succeeded on staging — no action needed
Mar 17 ✓ Weekly backup report — all green
Mar 10 ✓ Weekly backup report — all green
Mar 03 ✓ Weekly backup report — all green
Feb 24 ✓ Weekly backup report — all green
Feb 17 ✓ Weekly backup report — all green
Feb 10 ✓ Weekly backup report — all green
Feb 03 Please rotate your encryption key by May 1
Jan 27 ✓ Weekly backup report — all green
days since you last worried: 47
[ features ]

Pixel-precise backups. Zero drama.

The pieces you'd build yourself if you had a spare weekend every month for the rest of your life.

Verified restores

Every backup is checksum-verified and periodically restored into a scratch sandbox — so you know it actually works.

Encrypted at rest

AES-256 with keys you own. We never see your data in the clear, and we never keep it longer than you say.

Redundant, by default

Every backup is stored in multiple regions automatically. You choose the redundancy level; we handle the rest. Same price either way.

Email that earns its place

A weekly calm report. A real email only when something is actually wrong. No noisy daily chirps.

One-line restore

calmbackup restore --to staging and pour a coffee. Point-in-time recovery included.

Audit-ready ledger

Every run, every byte, every hash — kept in an append-only log you can export for SOC 2 evidence.

[ the weekly email ]

A report you'll actually read.

One page, once a week, written like a colleague wrote it. No dashboards to log into, no widgets to configure — just a short, reassuring note that everything was taken care of.

  • A one-line verdict at the top, so the tab is closeable in three seconds
  • Plain-English notes on anything that retried, grew, or changed
  • Proof your backups are restorable, not just stored
  • Signed, so you know it came from us and not an impostor
From reports@calmbackup.com
To ops@acme.co
Date Sunday, 14 April 2026 · 09:00
Subject Your backups for the week — everything is safe

Good morning,

Your backups ran as scheduled this week and everything is safely stored. There is nothing you need to do. This note is just so you know.

All backups completed successfully.
28 of 28 scheduled runs · 3 restore checks passed · no data loss
Scheduled backups 28 of 28 completed
Total size protected 118.4 GB (up 2.1% from last week)
Restore checks 3 of 3 passed, with full verification
Retries 1 (staging, recovered automatically)

We also tested a restore of your Thursday snapshot into a scratch environment. It came back byte-for-byte identical — which means if you ever need it, it will work.

We'll be in touch again next Sunday, or sooner only if something genuinely needs your attention.

With care,
The CalmBackup team

pgp-signed · a03e…88c1 calmbackup.com/acme
[ the cli — two modes ]

Pipe it into a script. Or sit inside it.

The CLI runs two ways. Non-interactive for cron, CI, and deploy scripts — tidy stdout, exit codes, no surprises. Interactive when a real human needs a live dashboard in the terminal.

  • non-interactive Deterministic output. Pipe it into anything.
  • run trigger a backup for a source, now
  • restore bring a snapshot into any target
  • ls browse snapshots, filter by time or hash
  • verify re-hash a snapshot end-to-end
  • prune apply retention policy manually
  • interactive A live dashboard, right in your terminal.
  • status watch every source in real time
~/acme — calmbackup
# Run an ad-hoc backup on the prod profile
$ calmbackup run prod
→ loading ~/.calmbackup/prod.yml
→ postgres:acme dumped in 12.3s (412 MB)
→ files:uploads synced in 8.1s (3.8 GB)
→ encrypting with your local key
→ uploading · redundant (2 regions)
ok (38.4s) — snapshot sha256:9f3c…e1a2
$
[ pricing ]

Flat. Predictable. Forever.

No per-GB surprise. No usage panic. You pay by number of sources — everything else is the same across plans.

Solo
$5 /mo
For a side project that matters.
1 source
  • Unlimited databases, files & folders
  • Encrypted end-to-end with your key
  • Hourly backups
  • Daily restore verification
  • Daily email reports
  • Webhook notifications
  • Redundant storage, multiple regions
Start free for 14 days
most picked
Growth
$15 /mo
For a small SaaS with customers who notice.
Up to 50 sources
  • Unlimited databases, files & folders
  • Encrypted end-to-end with your key
  • Hourly backups
  • Daily restore verification
  • Daily email reports
  • Webhook notifications
  • Redundant storage, multiple regions
Start free for 14 days
Scale
from $95 /mo
For agencies running things for other people.
Unlimited sources
  • Unlimited databases, files & folders
  • Encrypted end-to-end with your key
  • Hourly backups
  • Daily restore verification
  • Daily email reports
  • Webhook notifications
  • Redundant storage, multiple regions
  • White-label reports
  • Role-based access
  • SOC 2 evidence pack
Talk to us
[ questions ]

Things people ask before trusting us.

Yes. After setup, the only touch-point is a weekly email — and only when it's boring. If something's wrong, we'll tell you, and we'll try to fix it before you see it.

Stop thinking about backups.

Fourteen days on us. No card, no call, no sales email ever. If it doesn't earn its $10 a month, delete the account with one click.