Five layers between attackers and your data.

Ransomware mimics legitimate application commands to encrypt, modify, or delete stored data. The fastest place to stop that attack is at the interface itself, before the request reaches the storage layer. Backups become immutable the moment they are written.

Modern ransomware exfiltrates more often than it encrypts. The data layer blocks unauthorized read and unauthorized movement, and renders any data that does leave the system unreadable without the keys.

If higher layers are bypassed, an attacker may try to read directly from disks. Distributed erasure coding fragments every object across many drives, and the metadata that reassembles them is protected on a separate, hardened path.

A single site is one fire, one flood, or one ransomware sweep away from total compromise. Multi-site replication spreads data across sites and clouds. Site- specific IAM keeps an attacker who reaches one site from pivoting freely to the others.

The strongest attacks compromise a privileged account and operate as the system itself. Most "immutable" platforms collapse here, because immutability is enforced at the API and the architecture still allows overwrites. The fifth layer removes that path entirely: data is preserved in its original form once stored, even if an attacker attains the privileges needed to bypass API-level immutability.