stasis is a backup and recovery system with an emphasis on security and privacy; no personal information is collected, no unencrypted data leaves a client device and all encryption keys are fully in the control of their owner.

A stasis ˈsteɪsɪs/ or stasis field, in science fiction, is a confined area of space in which time has been stopped or the contents have been rendered motionless.

Why?

• Trust Issues: Do you trust your backup or infrastructure/storage provider with your unencrypted data?
• Multi-Device: How many backup providers would you need to cover all types of devices you own?
• Self-Hosted: What if your backup provider goes out of business?

Goals

• Recover user data from total failure or device loss
• Replicate data to local and remote/cloud storage
• Encrypt data before it leaves a device
• Manage all device backups from a single service

Along with provision, he goal is to be able to grab a blank/off-the-shelf device and recover the original system in an automated and repeatable way.

Features:

• Client-only Encryption: encryption and decryption is done by client applications; the server never deals with unencrypted data or metadata
• Device-only Secrets: user credentials and device secrets do not leave the device on which they were entered/generated
• Default Redundancy: copies of a device's encrypted data are sent to multiple nodes by default (local and remote)
• Hybrid Data Storage: various storage backends (Apache Geode, Slick, in-memory, file-based) are supported and used
• Secrets Escrow: (TODO) enables storing encrypted device secrets on the server to simplify recovering of a lost or replaced device
• Serverless Mode: (TODO) enables creating backups and recovering from them without the presence of a server

Note: currently, this app requires a server counter-part. For that as well as for clients on other operating systems (Linux, Mac), please head over to the app's repo.