Security

Security & restore-first design

Restorely encrypts snapshots before storage and builds each snapshot for restoring supported Linear data back into Linear.

Encrypted at rest with AES-256-GCM envelope encryption (per-tenant keys) before any object lands in storage

Cloudflare R2 Standard storage by default ($0 restore egress)

Encrypted snapshots, plain restore reports, and narrow data scope. Restorely does not claim SOC 2 certification, does not provide procurement documents, and does not support regulated data.

First public verification numbers will publish after the cold-start dogfood pass records measured results.

Methodology

What restore-first design means

Restorely creates backup data, restores supported Linear content, and compares the result against the expected report shape before publishing public verification numbers.

Runs use synthetic Restorely-owned data, not customer workspaces.
Counts will come from the most recent recorded cold-start dogfood pass.
Published pass/fail language will reflect measured results from that pass.
Missing data is described directly instead of being hidden or estimated.