Do I need to install anything?
No. Verestore is hosted: you give it a read-only key to the bucket or container where your pg_dump files land, which takes about five minutes with the copy-paste policies in the docs. There is no agent and no runner to operate on your side.
Can the evidence be forged?
Not without breaking a signature. Each result is signed inside its sandbox with a key minted for that run, and Verestore countersigns the verdict independently of the customer. Anyone can check a report at /verify, or offline with our published keys; changing one number breaks it.
Do you see my data?
No row data leaves the isolated run: what comes back is names, counts, hashes, durations and a scrubbed log excerpt, and a schema enforced on upload rejects anything else. The restored database and the downloaded dump are deleted when the run ends. Your key is read-only, limited to your backups (one prefix, or one bucket or container where the store cannot scope a prefix), and can never be read back.
Where can my backups live?
In any S3-compatible store (AWS S3, Scaleway, Cloudflare R2, Backblaze B2, Wasabi, OVHcloud, DigitalOcean Spaces, MinIO), in Azure Blob Storage, or in Google Cloud Storage. Provider snapshots die with your account, so keep a pg_dump copy in storage you control, ideally in another account or with another provider, and let us prove it restores.
What if my database is bigger than my plan?
Each plan has a per-restore limit on the stored backup size (shown on the pricing page). A larger backup is not downloaded: the run is marked inconclusive, never failed, and you can upgrade or, for Business, ask us for larger databases.
What happens to my dump in the free check?
You upload it over a pre-signed link straight into a quarantine bucket (2 GB at most). It is restored once, in the same isolated sandbox as customer runs, and deleted as soon as the run ends, and in any case within 24 hours of the upload, even if the check never runs. What you get by e-mail is a link to the report: names, counts, hashes and timings, never data. Your e-mail address and a salted hash of your IP address are kept 30 days to prevent abuse, then deleted.
How do I cancel?
An owner cancels from Billing → Manage subscription, which opens the customer portal of Paddle, our merchant of record. The plan stays active until the end of the period you paid for and you are not charged again; then the organisation moves to the Free plan and its limits apply. Your targets and past reports stay. Refunds are covered by the refund policy (14 days on a first purchase).
Do you support MySQL or MongoDB?
Not today. Verestore restores PostgreSQL 13 to 17 from pg_dump backups (custom or plain format). Other engines will come only when we can test them as thoroughly.
Can it run inside my infrastructure?
Not yet. An agent that runs restore tests on your own hardware, with no inbound port, is planned; today every test runs in our isolated hosted runners in Paris. The pricing page has a waitlist.
What happens if Verestore disappears?
Your backups are untouched: we only ever read them. Every report and evidence pack you downloaded stays verifiable offline: the hashes and Ed25519 signatures check against our published public keys, with no service needed.