Version 1.0 supports MariaDB on Windows and Linux. PostgreSQL and MySQL are on the roadmap.See roadmap
SaintBackup
VIEN
Account Free 1-month trial
MariaDB backups, verified every day

A backup is only worth something if it restores.

SaintBackup collects MariaDB backups from many servers onto one management machine, encrypts them end to end, and runs a restore test on every database every day to prove each backup actually works. Not a matter of trust, but of record.

Try free for 1 month Talk to us about deployment
  • Free Agent
  • End-to-end AES-256-GCM
  • Standard mariabackup files
SaintBackup Center · Dashboard 2026-11-09 08:41
Agents online
3/3
Last ping 12 seconds ago
Latest prepared backup
08:30
Full at 02:00 + 13 incrementals
Today's restore test
Passed
3/3 databases · 04:12–04:31
AgentOSIncrementalVerified
db-salesLinux08:30 Passed
db-inventoryWindows08:30 Passed
db-accountingLinux08:00 Passed
sales_20261109 · inventory_20261109 · accounting_20261109 Telegram: report sent at 04:32
01

Backup

mariabackup matched to the server version. Daily full, incremental by the minute (every 30 minutes by default), parallel compression, and encryption on the Agent machine before anything is sent.

02

Verified

Every day the Center runs a restore test of each database into <db>_yyyyMMdd and reports the result via Telegram. If a backup can't be restored, you know that same morning.

03

Restore

Backups are prepared ahead of time for point-in-time restore into MariaDB on the Center machine. Pick a date and time, pick a database, with no need to piece the incremental chain together by hand.

The lifecycle of a backup

From snapshot to proven restorable

Every step leaves a trail in the Center log. When internal audit asks “does yesterday’s backup actually work?”, the answer is already there in step 5.

  1. 1

    Snapshot

    The Agent runs mariabackup on the schedule signed by the Center. If MyISAM tables are present, lock-free mode is turned off automatically.

  2. 2

    Compress and encrypt

    Parallel compression and AES-256-GCM encryption on the Agent machine itself. Data is already encrypted when it leaves the machine.

  3. 3

    Transfer

    Sent in 8 MB chunks and resumed if the network drops. If the Center is offline, the Agent keeps pending backups encrypted.

  4. 4

    Prepare

    The Center decrypts, merges the full backup with its incrementals, and prepares them for point-in-time restore.

  5. 5Verified

    Restore test

    Restored daily into <db>_yyyyMMdd, with Passed or Failed reported via Telegram.

Architecture

Two programs, clear lines of responsibility

The Agent sits next to the data and holds the database credentials. The Center runs wherever you manage things: an office server, a VPS, or a laptop. Pairing uses an 8-character pairing code and a 6-digit confirmation number, with no SaintBackup server in the middle.

Machines running MariaDB
Agent · db-salesLinux
Agent · db-inventoryWindows
Agent · db-accountingLinux
Encrypted 8 MB chunks
AES-256-GCM · every request signed
ECDSA/ECDH P-256 per machine
Management machine
Center
Storage · prepare · schedules · license
MariaDB on the Center machineRestore test: Passed
Telegram alerts

Agent

Free

Installed on the machine running MariaDB.

  • Holds the database credentials; passwords never leave the machine
  • You choose which databases are shared with the Center
  • Runs backups only on schedules signed by the Center
  • Keeps pending backups encrypted while the Center is offline

Center

Licensed

Management machine: an office server, a VPS, or a laptop.

  • Choose databases and tables, and set a schedule for each Agent
  • Prepared ahead of time for point-in-time restore
  • Daily restore tests into MariaDB on the Center machine
  • Telegram alerts on errors or lost connections

Three ways to connect, chosen to fit your network

None of them forces your data through SaintBackup's servers, unless you deliberately choose the relay in method 3.

METHOD 1
Agent calls out to the Center
Agent Center :8721

The Center opens port 8721. A good fit when the Center is an office server or a VPS with a fixed address.

METHOD 2
Center calls in to the Agent
Center Agent :8731

The Agent opens port 8731. The Center can be a laptop, with no fixed address needed.

METHOD 3Coming soon · 1.2
Through a cloud intermediary
Agent Cloud Center

Neither side opens a port. SaintBackup Relay is 50 USD per 1 TB, or use your own R2/S3 bucket for free.

Security and compliance

A checklist for your information security team

Each line is a technical mechanism you can verify yourself in the Security docs and in the Center log.

To save you asking: SaintBackup does not currently hold ISO 27001 certification or a SOC 2 report. We don't claim what we don't have. If your procurement process requires a security questionnaire, send it to us and we'll answer it item by item.
Read the Security docs
ItemStatus
End-to-end AES-256-GCM encryption
Encrypted on the Agent; only the Center can decrypt.
Yes
Per-machine keys
ECDSA/ECDH P-256, generated on the machine and never sent out.
Yes
Every request signed, signed schedules
The Agent rejects any command not signed by its paired Center.
Yes
Database credentials stay on the Agent
The Center never needs the source MariaDB password.
Yes
Pairing without a third party
8-character code + 6-digit confirmation, no SaintBackup server needed.
Yes
Consistent with MyISAM tables
Lock-free mode is turned off automatically so the backup stays consistent.
Yes
Daily proof of restore
Restore test results are logged and sent via Telegram.
Yes
ISO 27001 / SOC 2 certification
Not yet. We'll update this page if that changes.
Not yet
Business continuity commitment

If SaintBackup shuts down, your data doesn't go down with it.

  • Activated software keeps running. The Center and the Agent don't need to call our servers for day-to-day operation.
  • Open format. Backup files are standard mariabackup packed in a zip, with no proprietary format.
  • Manual restore is always possible. The procedure is documented in the “Manual restore” and “If SaintBackup shuts down” articles.
Restore without SaintBackupbash
# 1. Unzip the prepared full backup
unzip sales_full.zip -d /restore/sales

# 2. Prepare (if not already) with the matching mariabackup version
mariabackup --prepare --target-dir=/restore/sales

# 3. Copy into the data directory of the stopped MariaDB
mariabackup --copy-back --target-dir=/restore/sales
Pricing

One Center license, billed annually

The Agent is free. We only sell annual Center licenses, each including 1 Agent seat. Each extra Agent seat is 30 USD/year. Payment via PayPal. No perpetual license.

Item
Free trial
0 USD
1 month
1 year
50 USD
50 USD/year
2 years Popular
80 USD
40 USD/year
3 years
120 USD
40 USD/year
Included Agent seats 1 1 1 1
Each extra Agent seat Not applicable 30 USD/year 30 USD/year 30 USD/year
Encrypted full + incremental backups
Daily restore tests
Point-in-time restore, Telegram alerts
Payment Not required PayPal PayPal PayPal
Start free trial Buy 1 year Buy 2 years Buy 3 years
Example: 3 Agents for 2 years = 80 USD + 2 seats × 30 USD × 2 years = 200 USD. Free trial: 1 month, 1 Agent, all features.
Docs

20 articles, organized by who needs to read them

Start from your role. The Troubleshooting guide covers 13 real errors encountered in deployments, with fixes.

15-minute quick startInstall the Center, install an Agent, pair them, and run your first backup. Read now

System administrators

Installation, networking, pairing · 7 articles

DBA

Schedules, storage, restore, troubleshooting · 8 articles

Buyers

Risk, licensing, planning · 4 articles
Published roadmap 1.1 AI troubleshooting assistant · 1.2 Cloud connection method · Then: PostgreSQL, MySQL
Frequently asked questions

Before you seek approval

For other questions about procurement, contracts, or security, reach us through the Contact page.

What exactly does the “daily restore test” do?

Every day the Center takes the latest backup and restores it into MariaDB on the Center machine as a database named <db>_yyyyMMdd, then logs a Passed or Failed result and sends it via Telegram. That is proof the backup works, not just proof that a file exists.

Does my data pass through SaintBackup's servers?

With connection methods 1 and 2: no. The Agent and the Center talk directly, and pairing doesn't need our servers either. With method 3 (coming soon), you choose either the SaintBackup relay or your own R2/S3 bucket; in both cases the data is already AES-256-GCM encrypted before it leaves the Agent machine.

What if the Center is off or loses its network connection?

The Agent keeps running backups on the signed schedule and holds pending backups encrypted. When the Center comes back, the pending backups are sent in 8 MB chunks, and an interrupted transfer resumes from the unfinished chunk.

Do I lose old backups when my license expires?

No. Backup files are standard mariabackup in a zip, stored on your Center machine, and can always be restored manually. Renewal terms are detailed in the License article.

Do you support MySQL or PostgreSQL?

Version 1.0 supports only MariaDB on Windows and Linux. PostgreSQL and MySQL are on the roadmap, after the AI troubleshooting assistant (1.1) and the cloud connection method (1.2).

By 4 a.m. tomorrow, you’ll know whether your backups can actually be restored.

Try it free for 1 month with 1 Agent, no credit card required. Or talk to us about rolling it out across many servers.