Protected Storage (S3)
Backups that cannot be deleted, files you can roll back
Versioned, object-lock (WORM) S3 storage in Istanbul: an immutable backup copy against ransomware and accidental deletion. Works with aws-cli, rclone, restic and Veeam; fixed euro pricing.
- Data in Istanbul (tr-ist-1)
- Free versioning
- Object Lock (WORM)
- S3 Object Lock API compatible
- €0extra charge for versioning
- 3 modesGovernance, Compliance, Legal Hold
- 30 daysdefault retention for previous versions (adjustable)
- S3Veeam, restic, rclone, aws-cli
Plans
Same plans as Object Storage
Plan sizes and prices are the same as standard Object Storage. Versioning is included free in every plan; each Object Lock add-on gives you one locked bucket.
Protected S3 Mini 250 GB
$3.55/moOne Time+VAT
| Billing Cycle | Total | Per Month |
|---|---|---|
| Monthly | ||
| Quarterly | ||
| Semi-Annually | ||
| Annually | ||
| Biennially | ||
| Triennially |
- Storage (old versions included): 250 GB
- Included traffic: 250 GB/mo
- Buckets: 5
- Access keys: 5
- Versioning: Every bucket
- Object lock (WORM): Add-on, per bucket
- Retention mode: GOVERNANCE / COMPLIANCE
- Data location: Istanbul
- Compatibility: S3 API
Protected S3 1 TB
$10.10/moOne Time+VAT
| Billing Cycle | Total | Per Month |
|---|---|---|
| Monthly | ||
| Quarterly | ||
| Semi-Annually | ||
| Annually | ||
| Biennially | ||
| Triennially |
- Storage (old versions included): 1 TB
- Included traffic: 1 TB/mo
- Buckets: 10
- Access keys: 5
- Versioning: Every bucket
- Object lock (WORM): Add-on, per bucket
- Retention mode: GOVERNANCE / COMPLIANCE
- Data location: Istanbul
- Compatibility: S3 API
Protected S3 5 TB
$43.46/moOne Time+VAT
| Billing Cycle | Total | Per Month |
|---|---|---|
| Monthly | ||
| Quarterly | ||
| Semi-Annually | ||
| Annually | ||
| Biennially | ||
| Triennially |
- Storage (old versions included): 5 TB
- Included traffic: 3 TB/mo
- Buckets: 25
- Access keys: 5
- Versioning: Every bucket
- Object lock (WORM): Add-on, per bucket
- Retention mode: GOVERNANCE / COMPLIANCE
- Data location: Istanbul
- Compatibility: S3 API
Protected S3 10 TB
$80.84/moOne Time+VAT
| Billing Cycle | Total | Per Month |
|---|---|---|
| Monthly | ||
| Quarterly | ||
| Semi-Annually | ||
| Annually | ||
| Biennially | ||
| Triennially |
- Storage (old versions included): 10 TB
- Included traffic: 5 TB/mo
- Buckets: 50
- Access keys: 5
- Versioning: Every bucket
- Object lock (WORM): Add-on, per bucket
- Retention mode: GOVERNANCE / COMPLIANCE
- Data location: Istanbul
- Compatibility: S3 API
Prices shown in USD. Prices exclude VAT; VAT is added at checkout. The Object Lock add-on is €2.99 per bucket per month (list price €3.99); no billing-period discount applies to this add-on. Previous versions and locked data count towards your plan storage.
Two layers of protection
Versioning brings files back, Object Lock makes them undeletable
They work together: versioning lets you undo mistakes, Object Lock stops a malicious or wrong command from destroying your backup.
Versioning (every bucket, free)
- The previous version of an overwritten file is kept; restore any version with one click.
- A deleted file does not disappear: a delete marker is placed on it, remove the marker and the file is back.
- By default, previous versions are deleted automatically after 30 days; you can change the period or turn it off.
- Previous versions count towards your plan storage; there is no separate charge.
Object Lock (WORM, add-on)
- "Write once, read many": a locked object cannot be deleted or modified during its retention period.
- The lock is chosen when the bucket is created; it cannot be enabled or disabled later.
- Set a default retention (in days) for the bucket, or apply retention and Legal Hold per file and version.
- Works with the S3 Object Lock API; Veeam, restic, rclone and AWS tools use it directly.
Use cases
Which data should be protected?
Anything whose loss or alteration would stop your business.
Ransomware-proof backups
Even if an attacker takes over your server and your backup key, locked backups cannot be deleted or encrypted before the retention period ends. Anything written becomes a new version and the old one stays.
Veeam immutable repository
Add it as an S3 compatible object storage repository; with "Make recent backups immutable" Veeam locks the backups and manages retention itself.
Protection against accidental deletion
Bring back a deleted file by removing its delete marker, or an overwritten file by restoring an earlier version. A wrong sync command is no longer a disaster.
Audit and archive retention
Invoices, records and contract archives stay unchanged for the period you choose. Use Legal Hold for data that must be kept for an undefined period.
Lock modes
Governance, Compliance or Legal Hold?
You choose the mode and the period. If unsure, try Governance first; Compliance cannot be undone.
| Feature | Governance | Compliance | Legal Hold |
|---|---|---|---|
| Who can delete before it ends? | Not you; only Gyro authorised staff at your request, with an audit record | Nobody, including Gyro | Nobody until you remove it (in the client area or with a key that has write permission) |
| Period | Set by you in days | Set by you in days | Indefinite, until removed |
| Can the period be shortened? | No, it can only be extended (or upgraded to Compliance) | No, it can only be extended | No period; managed with Legal hold set / remove |
| When to use it? | Protection against accidental deletion, testing; deleted with the service on cancellation | Immutable backups, ransomware protection | Retention of unknown length: investigations, legal matters |
Comparison
Standard Object Storage or Protected Storage?
The two products run on separate endpoints; you can use both together.
| Feature | Object Storage | Protected Storage |
|---|---|---|
| S3 compatible API and Istanbul (tr-ist-1) | Yes | Yes |
| Endpoint | s3.gyrohosting.com | s3-kilit.gyrohosting.com |
| Versioning | No | On for every bucket, free |
| Object Lock (WORM) | No | Per-bucket add-on |
| Static website, custom domain, file manager in the client area | Yes | No |
| Access keys, lifecycle, CORS | Yes | Yes |
| Plan price | Same | Same |
| Best for | Media, static sites, general files | Backups, archives, data that must not be deleted |
Tools
With the tools you already use
Enter the endpoint and region; lock and version commands are standard S3 commands. Besides the client area, it can also be managed with the API and the command line tool.
Object storage → S3 Compatible Service point: s3-kilit.gyrohosting.com Region: tr-ist-1 Bucket: firma-veeam (Object Lock) ☑ Make recent backups immutable
aws --endpoint-url https://s3-kilit.gyrohosting.com \ s3api put-object-retention \ --bucket firma-arsiv --key 2026/defter.pdf \ --retention Mode=COMPLIANCE,RetainUntilDate=2031-01-01T00:00:00Z
aws --endpoint-url https://s3-kilit.gyrohosting.com \ s3api list-object-versions \ --bucket firma-yedek --prefix rapor.xlsx
export RESTIC_REPOSITORY=\ s3:https://s3-kilit.gyrohosting.com/firma-yedek/restic restic backup /etc /var/www
[gyro-kilit] type = s3 provider = Other endpoint = https://s3-kilit.gyrohosting.com region = tr-ist-1 force_path_style = true
aws --endpoint-url https://s3-kilit.gyrohosting.com \ s3api put-object-legal-hold \ --bucket firma-arsiv --key dava/ek-1.pdf \ --legal-hold Status=ON
Bucket names in the examples are placeholders. Create your access key under Access keys in the client area.
Good to know
Clear and simple
A lock is a powerful tool; know what it does and what it does not do before you start.
What it gives you
- An immutable copy protecting against ransomware and accidental deletion
- Free versioning on every bucket and one-click restore
- Versions (Restore, Remove delete marker, Delete permanently) and Object lock (Default retention, File / version lock, Legal hold) pages in the client area
- S3 Object Lock API: Veeam, restic, rclone, AWS CLI and SDKs
- Your data stays in Istanbul, on our own hardware in Turkey
What it does not do
- The lock cannot be enabled or disabled later; decide when you create the bucket
- Compliance periods cannot be shortened; while Compliance or Legal Hold data exists the service cannot be cancelled and charges continue until the period ends
- No static website, custom domain or client-area file manager (available in standard Object Storage)
- It is not a regulatory compliance certificate; you decide which data is kept and for how long
Where is my data?
Protected Storage runs in NetDC Data Center, Bağcılar, Istanbul, Türkiye, on our own hardware in Turkey.
Can I enable or disable Object Lock later?
No. The lock is chosen when the bucket is created and cannot be changed later. To protect data in an unlocked bucket, create a new locked bucket and copy your data into it. Versioning is on in unlocked buckets too.
Can even I delete a file in Compliance mode?
No. Until the retention period ends nobody, including you, your team or Gyro, can delete or modify the file; the period cannot be shortened, only extended. Choose the period carefully and, if unsure, test with Governance mode first.
What is the difference between Governance and Compliance?
You cannot delete a Governance-locked file yourself either; if needed, Gyro authorised staff bypass the lock at your request, with an audit record. It does not prevent cancelling the service; on cancellation this data is deleted too. A Compliance lock cannot be bypassed by anyone until it expires, and the service cannot be cancelled while one is active; it suits immutable backups. Legal Hold has no period and applies until you remove it in the client area.
If I cancel the service, when do charges for locked data stop?
While data under a Compliance lock or Legal Hold exists, a cancellation request cannot be opened; the service and its charges continue until the last lock expires (Legal Hold until you remove it). Even if the service ends for another reason (for example non-payment), this data is kept and charged until the end of its period. If only Governance-locked data exists you can cancel; that data is deleted with the service.
Do previous versions count towards my plan storage?
Yes. Previous versions and files with delete markers count towards your plan storage. By default previous versions are deleted automatically after 30 days; you can change this per bucket under Lifecycle or set it to 0 to turn it off. Locked versions are not deleted by this rule before their lock expires.
Is versioning charged?
No. Versioning is on for every bucket and free; only the storage used by previous versions counts towards your plan. The only paid add-on is Object Lock (€2.99 per bucket per month).
How do I use it with Veeam?
In Veeam add an S3 compatible object storage repository, enter s3-kilit.gyrohosting.com as the service point and tr-ist-1 as the region, select a bucket with Object Lock and tick "Make recent backups immutable". Leave Default retention Off for this bucket and set the previous-version deletion under Lifecycle to 0 (off); Veeam manages the periods. See the Veeam guide in the Knowledge Center for details.
Can I host a static website with this product?
No. Protected Storage has no static website hosting, custom domain or client-area file manager. Use standard Object Storage for websites; you can use both products together.
Can I convert my existing Object Storage bucket to protected?
A bucket cannot be converted in place; the two products run on separate endpoints. Copy your data into a new protected bucket with a tool such as rclone. The old bucket has no version history to carry over; versions are kept from the copy onwards.
Is Object Lock a regulatory compliance certificate?
No. Object Lock and versioning are technical measures that create an immutable copy against accidental deletion and ransomware. You or your advisor decide which data must be kept and for how long. We recommend keeping a copy of important data elsewhere as well.
Make your backups undeletable
Pick a plan, create your locked bucket and point your backup tool at the new endpoint.
Not sure which plan fits you?
Tell us what you need and our team will recommend the right setup within minutes.
Contact
Reach Sales & Support
Have a question before you buy, or need help with an existing account? Call or email us.