LTO tape, NAS, cloud, and local disk, all written together and tracked in one place, so 3-2-1 is the default, not a chore.
Every copy is re-read off the drive, the share, the bucket, or the tape and matched byte for byte. A copy that fails the check does not count.
Tapes are standard LTFS and disk copies are ordinary files. Stop using Hiberden and nothing is stranded, because nothing was locked in.
An air-gapped archive machine licenses from a file carried on a USB stick. Your files and your cloud keys never reach our servers.
A perpetual license, not a subscription. You buy the version you tested and keep it, and cloud destinations are in the base price.
Four steps take an archive from a policy decision to a verified restore years later, with one project and every copy tracked in a single catalog.
Real screens from the app · sample data
01 · Plan & policy
Set a policy for the archive: which destinations it writes to, and therefore how many copies it keeps. Build it for the shape the 3-2-1 rule asks for, three copies across two kinds of media with one kept offsite, and the archive reads Covered once every destination in the policy holds a verified copy.
02 · Archive
Point Hiberden at a folder and archive it once. The same operation writes every destination in your policy (local disk, cloud, and tape), and the catalog records where every file landed. No juggling three separate vendors' tools.
03 · Verification
When Hiberden writes an archive, it takes its fingerprint: a checksum that changes if even one bit of the data does. Then it reads every copy back from the drive, the share, the bucket, or the tape it just wrote, and checks the fingerprint again. Match, and the copy is proven identical, byte for byte. Miss, and the copy fails. An archive shows Covered 3 of 3 only once every copy has passed, so a bad copy surfaces now, not years from now.
And it keeps checking. Set a schedule once and Hiberden quietly re-reads your disk and NAS copies in the background, oldest first, so silent decay on a copy nobody has opened in three years still gets caught. Quick checks for routine sweeps, full checks when the answer has to hold up.
04 · Restore
Search the catalog for a file across every archive and every copy, then restore from whichever is fastest or closest. Open formats, no lock-in: nothing is held hostage, and nothing has to be migrated later.
Four steps, no specialist, and you can run the whole loop today on the built-in virtual tape drive.
Start the free trialEvery archive is anchored on tape and surrounded by the other copies a real 3-2-1 plan needs. Mix and match to fit the work: tape and cloud, tape plus NAS plus cloud, or two tapes and a disk. The catalog tracks them all the same way.
The spine
The lowest cost per terabyte, and the copy that goes offline. Once the cartridge is out of the drive it sits on a shelf with no network path to it, so ransomware that reaches every share and every bucket still cannot touch it. That is the medium doing the work, not us: Hiberden is archive software, not security software. It writes in an open, documented format, with no proprietary container and no lock-in. If Hiberden ever disappears, your tapes are still your tapes.
Fast restore, low complexity. Any path Hiberden can write to (internal drive, attached storage, anything that looks like a folder), through the same integrity-checked write path as tape.
A network share is a folder to Hiberden. SMB, NFS, any share your machine can mount: an easy everyday copy on hardware you already run, with fast restores across the whole team.
S3-compatible object storage in your own account: AWS, Backblaze B2, Wasabi, MinIO, whatever you already pay for. Hiberden never holds your cloud credentials on its servers. Your storage, your account, your bill.
Every copy is read back and verified after every write, and your disk and NAS copies keep getting re-checked on the cadence you set. Eject a cartridge and that copy is offline until you want it back. When you need a file back, restore from whichever copy makes sense.
Hiberden includes a connector, built on the open Model Context Protocol, so an AI assistant you already use, like Claude, ChatGPT, Gemini, or Copilot, can work with your archive. Ask in plain language what you have, where a file lives across every copy, or which archives are fully verified, and it answers from your own catalog.
hiberden mcp connected·read-only
❯which of my archives aren't fully protected yet?
hiberden·list_archives
3 archives·2 covered·1 at risk
Two are covered 3-of-3 and verified. One still isn't:
VFX_Composite_Renders842 GBAt Risk
Local DriveAWS S3LTO-9
No tape copy yet, so it misses your 3-2-1 policy. Raise me to Archive access and I'll queue the tape write.
❯
You decide how much it can do. Permissions are a setting in Hiberden, not something the assistant can grant itself: read-only is the default, and higher levels, like organizing the catalog or setting up destinations, are yours to switch on. Every change an assistant makes lands in an audit trail you can read in the app, and it never sees your cloud keys or credentials. It works through the same verified path as everything else, and it answers to you.
More on the MCP connector: what you can ask, permission levels, and how it stays private
Hiberden is software you install, not a service we host. Your tapes sit in your library. Your NAS shares run on your network. Your cloud buckets stay in your own account, billed directly by your provider. We never hold your files or your credentials. It even licenses offline: an air-gapped archive computer activates with a file carried on a USB stick, and it never needs to connect.
Every copy is written in an open, documented format. Tapes are standard LTFS. Disk and cloud copies are ordinary files. The catalog that tracks it all lives on your machine, yours to move, back up, or audit without asking us.
If you ever stop using Hiberden, nothing is stranded. Your tapes stay readable, your files stay files, and your buckets stay in your account. There's nothing to migrate off, because nothing was ever locked in. You do not need our software to recover your own data.
Wherever data is expensive to create and impossible to recreate, a verified archive is the difference between a setback and a disaster.
Camera masters, project files, and finished deliverables: petabytes that have to survive long after the shoot wraps.
Growing footage libraries that need fast retrieval and a durable, offline copy that outlives any single system.
Scans and records under long-term retention requirements, where every copy has to be verified intact and still readable years later.
Training sets and model checkpoints that are costly to regenerate and worth keeping cold between runs.
Instrument data and results that must stay reproducible and readable years, or decades, later.
Records kept for compliance, where an auditable, integrity-checked copy matters as much as the data itself.
Try the full product free for 30 days, every feature on, no card required. Restore and verify always work, license or not. A virtual tape drive is built into the app, so you can set up and evaluate the whole 3-2-1 workflow before investing in an LTO drive. When you're ready, the same archives import onto real hardware.
Start the free trial Compare it to Canister, YoYotta, and Archiware P5
Windows 10+, Linux, and macOS · 30 days, every feature, no card · $299 once for a perpetual license, whenever you're ready