ValtaOne encrypts every object and splits it into fragments held across independent custody domains. Compromise one site, one cloud or one admin account and you hold nothing that can be read.
Point at or tap a data block to fragment it across three custody domains. Do the same on a domain to breach it: the three fragments taken rebuild nothing, and the six that remain still rebuild the block.
One architecture. Four problems it retires.
Every ValtaOne product runs on the same fragment layer. Deploy it once for the problem in front of you, then switch on the next without another migration.
Valta Resilient
Data breach resilience
Exfiltrated fragments reconstruct nothing, so a breached site or stolen credential no longer means a data breach.
Fragments sit where storage is cheapest and recovery is local, so reads and restores stop generating egress bills. Retention gets longer while the storage line gets shorter.
−94%
cloud egress
12-clinic imaging network, 900 TB of PACS retention. $148K a year down to $9K.
−58%
annual cloud spend
Fund administrator, 4.2 PB estate. $2.1M a year down to $890K, with the regulator’s concentration flag cleared.
$3.2M
capital reallocated
Regional health network deferred a multi-region DR build and moved the budget to clinical technology.
Your backup stack stays. ValtaOne sits beneath it.
Nothing gets ripped out on day one. Your backup platform keeps its schedules, policies and console; ValtaOne changes where and how its copies are held.
Valta Resilient encrypts and fragments your data across independent custody domains. A phished mailbox, a stolen admin token or a breached data centre yields fragments that reconstruct nothing.
Phishing and token theft reach mailboxes, file shares and the backups behind them. Perimeter controls slow attackers; they do not make stolen data useless.
Insurers are repricing
Premiums rise and coverage ceilings fall after every near-miss, and underwriters now ask how exfiltration is contained, not just prevented.
Clients are asking
Privacy questionnaires increasingly ask about exfiltration resilience. A weak answer stalls renewals.
How it works
Same fragment layer as every ValtaOne product; Valta Resilient sets the placement and policy.
Step 1
Fragment
Each object is encrypted and split into N fragments, any K of which can rebuild it.
Step 2
Distribute
Fragments are placed across custody domains so no single site, provider or account holds K.
Step 3
Reconstruct
Only an authorized restore gathers K fragments. Fewer than K reveal nothing, wherever they end up.
What changes
−22%
ransomware sub-limit premium at the next renewal
30 days
to close two client contracts stalled on privacy questionnaires
0
new security hires needed to reach CISO-level posture
From illustrative composite scenarios, not named customers.
Bay Street firm, 220 lawyers, hybrid productivity suite with cloud backup. A phishing incident nearly exfiltrated a partner mailbox. Cyber insurance premium up 47% with a lower ceiling. Client privacy questionnaires began asking about exfiltration, and two renewals stalled.
6-of-9 · cloud 3 · Toronto sovereign DC 3 · on-prem 3 · backup layer unchanged · 3-of-8 authorizer quorum
Outcome
Ransomware sub-limit premium down 22%
Two stalled client contracts closed within 30 days
CISO-level posture without a CISO hire
“Three problems I had — exfiltration risk, DR posture, retention obligation — turn out to be one deployment. That is not what I expected.”
Valta Unbound keeps the majority of your fragments across two lower-cost sites you control and a minority in your cloud. Reads stay local, egress collapses, and your provider knows you can leave.
12-clinic diagnostic imaging network in the GTA. 900 TB of PACS retention in a Canadian cloud region, PHIPA-regulated. Cloud egress was the fastest-growing IT line for three straight quarters, driven by radiologists pulling comparison studies.
6-of-9 · Toronto sovereign DC 3 · second sovereign DC 3 · existing cloud region 3 · backup platform unchanged · 8-week cutover
Outcome
Cloud egress $148K → $9K a year (−94%)
Cloud storage $89K → $31K a year (−65%)
Saving funded a retention extension from 7 to 10 years
“For the first time in eighteen months, cloud is not the fastest-growing line on my IT budget. The physicians did not notice anything changed.”
Boutique wealth firm, about $4.8B AUM and 130 employees, single-cloud first. Under IIROC and OSFI B-13. A renewal arrived with a 32% increase. Leaving would have cost $183K in egress alone, and the provider knew it.
5-of-8 · incumbent cloud 3 · second cloud 3 · Toronto sovereign DC 2 · productivity suite unchanged · 4 months, no downtime
Outcome
Proposed renewal increase fell from 32% to 4%
About $215K a year saved against the counterfactual
Data layer now provider-independent
“I do not need to move off my cloud provider. I need them to know I can. The renewal was a different conversation. That is the whole ROI.”
Valta Sovereign places fragments so that no foreign-headquartered provider ever holds enough to reconstruct your data. A subpoena served on them can only produce fragments that mean nothing.
Cross-border firm, 85 lawyers, high privilege sensitivity, running on a US-headquartered cloud. A CLOUD Act subpoena was served on the provider for client data. The firm learned afterwards, and two clients moved their retainers.
6-of-9 · on-prem 3 · Canadian sovereign DC 3 · EU provider 2 · US-headquartered cloud 1 (cannot reach K alone) · 3-signature quorum
Outcome
Two departed clients returned; three new mandates cited the posture
Privilege-loss insurance premium down 18%
Jurisdictional whitepaper became a sales asset
“We could not afford to move off cloud, and we could not afford another CLOUD Act incident. The mathematics of the vault gave us both.”
Federal department, 12,000 employees, Protected B for most workloads, on US and Canadian cloud regions. Updated cloud policy named extraterritorial reach as a placement criterion. Six workloads flagged; 12 months to fix or migrate.
6-of-9 per Protected B workload · federal on-prem 3 · sovereign Canadian DC 3 · allied EU 2 · US-headquartered cloud 1 · 18 months, 6 workloads
Outcome
Six flagged workloads to green status within 9 months
Directive discharged on time
$67M capital and disruption avoided vs full on-prem
“The mathematics of the vault architecture is the first thing we have been able to hand to Justice for review that came back cleared with material comfort.”
Valta Air Gap holds your recovery copy as fragments across regions, providers and your own sites. No single administrator, account or location can read, alter or delete it; restores need a quorum of named authorizers.
Three consolidated teaching hospitals, 9,500 employees, 6.8 PB estate and a 25-year PHIPA archive. A ransomware wave put the CISO under weekly board scrutiny while the CFO carried $4.1M a year in DR replica cost.
6-of-9, dual region · two hyperscalers 2 + 2 · sovereign DCs 3 · on-prem 2 · existing backup retained · 4-of-12 authorizer quorum
Outcome
Multi-region DR project deferred; $3.2M reallocated to clinical technology
Insurance premium down 31%
Planned vault purchase repositioned as a complementary layer
“The vault purchase changed shape once we saw what fragmentation delivered. We still bought it, but not for the reason we had been planning to.”
Healthcare, financial services, legal and government, at mid-market and enterprise scale. In every one, a single deployment answered several executives at once and the incumbent backup product stayed.
Showing all 8 scenarios
Healthcare · Mid-marketValta Unbound
Diagnostic imaging network
12-clinic diagnostic imaging network in the GTA. 900 TB of PACS retention in a Canadian cloud region, PHIPA-regulated. Cloud egress was the fastest-growing IT line for three straight quarters, driven by radiologists pulling comparison studies.
6-of-9 · Toronto sovereign DC 3 · second sovereign DC 3 · existing cloud region 3 · backup platform unchanged · 8-week cutover
Cloud egress $148K → $9K a year (−94%)
Cloud storage $89K → $31K a year (−65%)
Saving funded a retention extension from 7 to 10 years
“For the first time in eighteen months, cloud is not the fastest-growing line on my IT budget. The physicians did not notice anything changed.”
Fund administrator, about 1,400 employees, 4.2 PB estate in a single cloud provider. Within OSFI B-13 supervisory scope. Cloud spend near $2.1M a year, 60% of it egress. The supervisor flagged single-provider concentration as a third-party risk.
6-of-9 · Montreal colocation 3 · second colocation site 3 · existing cloud region 3 · backup platform retained · 5-month tiered migration
Cloud spend $2.1M → $890K a year (−58%)
Egress $1.26M → $85K (−93%)
Recovery drill cost $180K → under $12K
Supervisor accepted the concentration mitigation
“The number that got the board's attention was not the $1.2M saving. It was the OSFI reviewer nodding when I walked through the fragment topology.”
Bay Street firm, 220 lawyers, hybrid productivity suite with cloud backup. A phishing incident nearly exfiltrated a partner mailbox. Cyber insurance premium up 47% with a lower ceiling. Client privacy questionnaires began asking about exfiltration, and two renewals stalled.
6-of-9 · cloud 3 · Toronto sovereign DC 3 · on-prem 3 · backup layer unchanged · 3-of-8 authorizer quorum
Ransomware sub-limit premium down 22%
Two stalled client contracts closed within 30 days
CISO-level posture without a CISO hire
“Three problems I had — exfiltration risk, DR posture, retention obligation — turn out to be one deployment. That is not what I expected.”
Three consolidated teaching hospitals, 9,500 employees, 6.8 PB estate and a 25-year PHIPA archive. A ransomware wave put the CISO under weekly board scrutiny while the CFO carried $4.1M a year in DR replica cost.
6-of-9, dual region · two hyperscalers 2 + 2 · sovereign DCs 3 · on-prem 2 · existing backup retained · 4-of-12 authorizer quorum
Multi-region DR project deferred; $3.2M reallocated to clinical technology
Insurance premium down 31%
Planned vault purchase repositioned as a complementary layer
“The vault purchase changed shape once we saw what fragmentation delivered. We still bought it, but not for the reason we had been planning to.”
Boutique wealth firm, about $4.8B AUM and 130 employees, single-cloud first. Under IIROC and OSFI B-13. A renewal arrived with a 32% increase. Leaving would have cost $183K in egress alone, and the provider knew it.
5-of-8 · incumbent cloud 3 · second cloud 3 · Toronto sovereign DC 2 · productivity suite unchanged · 4 months, no downtime
Proposed renewal increase fell from 32% to 4%
About $215K a year saved against the counterfactual
Data layer now provider-independent
“I do not need to move off my cloud provider. I need them to know I can. The renewal was a different conversation. That is the whole ROI.”
Government · EnterpriseValta Unbound + Valta Sovereign
Provincial shared-services agency
Provincial shared-services agency serving 12 ministries. 18 PB across three hyperscalers. The Auditor General flagged cloud concentration risk. Multi-cloud on paper, single-cloud lock-in per workload in practice.
6-of-9 as a shared service · three hyperscalers 2 + 2 + 2 · sovereign DCs 3 · per-ministry weighting · 14 months, 47 workloads
$8–14M aggregate annual saving as all three providers improved terms
Auditor General acknowledged the mitigation
Two workloads moved between providers at zero data-movement cost
“For the first time, our cloud negotiations are conducted from actual optionality, not performative optionality.”
Cross-border firm, 85 lawyers, high privilege sensitivity, running on a US-headquartered cloud. A CLOUD Act subpoena was served on the provider for client data. The firm learned afterwards, and two clients moved their retainers.
6-of-9 · on-prem 3 · Canadian sovereign DC 3 · EU provider 2 · US-headquartered cloud 1 (cannot reach K alone) · 3-signature quorum
Two departed clients returned; three new mandates cited the posture
Privilege-loss insurance premium down 18%
Jurisdictional whitepaper became a sales asset
“We could not afford to move off cloud, and we could not afford another CLOUD Act incident. The mathematics of the vault gave us both.”
Federal department, 12,000 employees, Protected B for most workloads, on US and Canadian cloud regions. Updated cloud policy named extraterritorial reach as a placement criterion. Six workloads flagged; 12 months to fix or migrate.
6-of-9 per Protected B workload · federal on-prem 3 · sovereign Canadian DC 3 · allied EU 2 · US-headquartered cloud 1 · 18 months, 6 workloads
Six flagged workloads to green status within 9 months
Directive discharged on time
$67M capital and disruption avoided vs full on-prem
“The mathematics of the vault architecture is the first thing we have been able to hand to Justice for review that came back cleared with material comfort.”
ValtaOne plugs in beneath the backup or archive platform you already run. It protects the same data with fragments in place of full copies, so it takes less storage, and lets you read it back from providers that don’t charge egress. This estimates what that is worth after the ValtaOne fee. The percentages are the point: they hold whichever dollar you budget in.
Net reduction in spend0%
3-year ROI on ValtaOne0%
Net saving in year 1$0
Net saving over 3 years$0
Year 1 spend, by what you pay for
Today
$0
With ValtaOne
$0
StorageEgress and retrievalValtaOne fee
Line
Today
With ValtaOne
Change
Storage, year 1
Egress, year 1
ValtaOne fee, year 1
Year 1 total
Per month, today
Year 2 total
Year 3 total
3-year total
What it means for each seat at the table
For the CIO
Keep the platform. Change what recovery costs.
For the CFO
A return funded from the storage line
For procurement
An add-on, not a replacement
How this is calculated
Every figure above comes from the inputs you set and the rates listed here. It is an estimate, not a quote.
Today
Storage with ValtaOne Three full backup copies take 3.0× your data. ValtaOne holds one set of 9 fragments in their place, any 6 of which rebuild the data, which takes 9 ÷ 6 = 1.5×. That is half the storage, so your storage line falls by 50%. The fragment set survives the loss of any three fragments.
Egress Each TB read back costs $90 in provider egress or retrieval charges today ($0.09 per GB). ValtaOne does not charge egress and does not remove a provider’s fee. Spreading fragments across providers lets you read from the ones that don’t charge, so that share of the $90 is avoided. The starting point is 50% avoided.
ValtaOne fee $10 per TB per month for backups and $8 per TB per month for archives, on the volume protected. You keep paying your storage providers directly.
Growth Volume grows once at the start of year 2 and again at the start of year 3. Year 1 uses today’s volume.
ROI Three-year net saving (storage and egress saved, minus the ValtaOne fee) divided by the three-year ValtaOne fee.
Dollar figures Indicative and before tax. Both sides of the comparison are priced in the same dollar, so the percentages are the same in Canadian or US dollars. Deployment services are not included.
Check these numbers against your own invoices.
Bring your current storage and egress bills. We’ll replace the benchmark rates with your real ones and size the fragment topology to match.
A 45-minute working session with an architect. Bring your storage footprint and what is forcing the question; you leave with a first-pass fragment placement for your estate.
