Introduction

backupd backs up PostgreSQL, MySQL, MongoDB and Convex on a schedule, encrypts every backup, and restores it in a sandbox to prove it works.

backupd is a managed backup service for your databases. You give it a connection string, pick a schedule, and it takes care of the rest: it dumps the database with the engine's own tools, compresses and encrypts the dump, stores it, checks the stored file, and on your plan's cadence restores it into a temporary database to count what came back.

What backupd does

Scheduled and manual backups of PostgreSQL, MySQL and MariaDB, MongoDB and Convex.
Encryption on every backup. Each file is compressed with zstd and encrypted with age before it is stored. Add your own key and you can open any new backup without backupd.
Integrity checks after every backup. The stored file is read back, decrypted and its checksums compared.
Restore tests. Backups are restored into a temporary database on a sandbox server running the same engine, and row or document counts are compared table by table.
Restores into a different database or over the original, from the app.
Uptime monitoring of every connected database, every 5 minutes.
Alerts on Slack, Discord, Microsoft Teams, Telegram, email or a signed webhook.
Team features: roles, passkeys, two-factor authentication and an audit log.
API keys and an MCP server so scripts and AI assistants can read your backups.

What backupd does not do yet

Point-in-time recovery and incremental backups. Every backup is a full copy.
Private networks, VPC peering, SSH tunnels or on-premise agents. Your database must be reachable from the internet over TLS.
A mode where only you can decrypt backups. backupd always keeps its own key for your workspace so it can run restores and restore tests.