Sign in
Book a demo
Start free trial
SECURITY AND COMPLIANCE

Security and compliance controls, in one place.

Role-based access, single sign-on, your own storage and region, a year of history, and exportable audit logs. Your vendors keep the platform running; you own the recovery. Resilience starts there.

Start free trial
Book a demo
25,000+ organizations trust Rewind with their data
Mask group
Mask group-1
Mask group-2
Mask group-3
Mask group-4
Mask group-5
Mask group-6
Mask group-7
The stakes

Your vendors run the platform. Recovery, access and, evidence are yours.

01

One agent, three platforms, one mistake

An agent holds broad write access across Jira, Confluence and GitHub, and can delete or change all three before anyone notices.

02

What you can undo sets what agents can do

Teams only let agents touch what they can afford to lose. Once you can undo it, you can widen the access.

03

Every AI policy needs a restore plan

Policies say what an agent should do. When something breaks, teams roll back to a known-good state and keep working.

What you get

Set your storage, your roles, your restore scope and, your reporting.

Your data storage, and rules

Keep backups in Rewind's own AWS storage, or bring your own. Choose the storage region for Atlassian and DevOps integrations, and set a retention window that matches your policy.

Granular control for every role

Four roles, from Owner to Read-only, each with least-privilege access. SAML single sign-on and enforced two-factor authentication (2FA). Governed in one place across every integration.

Recovery at a scope you choose

Choose a day, then choose a scope: one work item, one page, a space, or a whole site. Restored data lands in your live instance, and on Jira the good data around them stays in place.

Reporting and audit evidence

Exportable event and audit logs with API access, feeding your SIEM or ITSM. Usage and trend reporting. Vault Search finds a record across every backup you hold.

Solutions

Every control, listed.

Access and identity

  • Four account roles, each with least-privilege access
  • Owner, Admin and, Integration Admin roles for managing backups
  • A Read-only role for auditors and reviewers
  • SAML single sign-on, tied to your identity provider
  • 2FA sign-in enforced across every user

Storage and residency

  • Backups held in Rewind's own AWS storage by default
  • Bring your own storage, in a cloud account you control
  • Backups kept separate from the platform they protect
  • Choose the storage region for Atlassian and DevOps integrations
  • Storage regions: US, Canada, UK, Germany, Switzerland, Australia

Retention and history

  • A full year of backup history on Jira, Confluence, and GitHub
  • Retention windows are configurable to match your own policy
  • Every platform Rewind protects is backed up once a day
  • Run a manual backup yourself whenever you need one
  • Restore from any day still inside your retention window

Recovery

  • Restore a single work item, page or, record on its own
  • Restore a whole space, in either Jira or Confluence
  • Restore an entire site back to a day you choose
  • Restored data lands in your live instance, ready to use
  • On Jira, a restoration leaves existing good data in-place

Monitoring and alerts

  • Set your own alert conditions on backup activity
  • Alerts routed into the tools your team already watches
  • Reporting on backup usage and trends across the account
  • Vault Search finds a single record across every backup
  • Detailed event and audit logs for every action taken

Audit and evidence

  • Event and audit logs, exportable or, available over the API
  • Audit logs feed straight into your SIEM or ITSM tooling
  • Run a restore and keep the result as evidence
  • Your retention and storage region settings are on record
  • Subprocessor list and data locations published

Certifications and reports

  • SOC 2 Type II, an independent third-party security audit
  • SOC 3, a publicly shareable summary of the SOC 2 audit
  • ISO/IEC 27001:2022 certified for information security
  • CSA STAR Level 1, the Cloud Security Alliance registry
  • Platform penetration testing, with reporting available
See the Trust Center

Frameworks supported

  • GDPR-supported
  • CCPA- and CPRA-supported for California
  • PIPEDA-supported, for Canada
  • HIPPA-supported
  • DORA-supported, for EU financial services
  • Signatory to the CISA Secure-by-Design Pledge

Answer with evidence.
Recover fast.

Start free trial
Book a demo
Frequently Asked Questions

Questions a security review usually asks

What access controls does Rewind support?

Four roles: Owner, Admin, Integration Admin, and Read-only, each with least-privilege access. SAML single sign-on (SSO) and enforced two-factor authentication (2FA). Access is governed in one place across every integration on the account.

A SOC 2 Type II report, a SOC 3 report, ISO/IEC 27001:2022 certification, and CSA STAR Level 1. GDPR, CCPA and CPRA, PIPEDA, and DORA are supported, and a BAA is available for HIPAA. Every report sits in the Trust Center.

 

Backup data is stored in Rewind’s own AWS storage by default, or you can bring your own storage instead. For Atlassian and DevOps integrations, you choose the region yourself: US, Canada, UK, Germany, Switzerland, or Australia.

A year of backup history by default, and the retention window is configurable beyond that. Every platform Rewind protects is backed up once a day, and you can run a manual backup yourself whenever you need one.