Data Protection as a Service
Data protection you can prove.
Encryption, access control, immutable backups, data loss prevention and disaster recovery, run for you as one service. Your data stays protected, recoverable and compliant, even when attackers go after the backups first.

Independent immutable copies with Double-Play

0

Frameworks supported: HIPAA, PCI DSS, GDPR

0

Security monitoring and incident response

/7

Availability

0 %
protect.unitedlayer / example-health
Policy · Gold
PROTECT
PROVE

Protected workloads

Example tenant · Double-Play immutability
Protected5
Immutable copies2 of 2
Last backup12 min
Restore tests0 errors
Workload · detailStatus
ehr-db · OracleEvery 15 min · 2 immutable copiesProtected
patient-portal · VMware VMsHourly · 2 immutable copiesProtected
imaging · file sharesEvery 4 h · 2 immutable copiesProtected
billing · Hyper-V VMsHourly · 2 immutable copiesProtected
archive · Amazon S3Daily · object lockProtected
Included
Why now

Attackers go after
your backups first

Ransomware crews know a good backup means no payout, so they hunt for it. Recent industry
research shows how often they find it, and what it costs when they do.
89%
of organizations had their backup repositories targeted by attackers
34%
of targeted repositories, on average, were modified or deleted
8×
higher recovery costs when backups were
compromised
$4.44M
global average cost of a data breach, and $10.22M in the
US
Layers of protection

Security, compliance and
continuity in one service

Each layer covers a different way data gets lost: stolen, leaked, encrypted, deleted or simply
unavailable.
See it in motion

Watch your data stay safe

Seven moments from a protected estate, from ransomware that cannot reach the backups to a
report ready for the auditors.
Ransomware meets immutability. Production is encrypted, attackers try to delete the backups and fail, and a clean copy comes back. Two copies, two places. Double-Play keeps one immutable copy on-premises and another in a UnitedLayer data center, covering 3-2-1-1-0. Restore, then prove it. A clean restore point is chosen, scanned for malware, restored and verified with zero errors. Encrypted, keyed, controlled. Data is encrypted in transit and at rest, keys rotate, and only authorized people get in. Sensitive data, masked. DLP finds card numbers, SSNs and health data in an export and masks or tokenizes them before it leaves. Audit-ready reports. Controls for HIPAA, PCI DSS and GDPR are evidenced and rolled into a report. Example controls. Recover a whole site. Production in San Francisco replicates to Las Vegas, and a DR drill proves services can run from there.
LIVE · AUTO-PLAYING
Double-Play immutability · powered by Veeam

Two immutable
copies, in two places

Built on Veeam Backup & Replication with a scale-out backup repository, Double-Play keeps one
hardened immutable copy on your premises and a second, independent one in a UnitedLayer
data center.
Your workloadsVMware VMs and vAppsMetadata (owner, access rights, network, lease) backed up with each vApp
Copy 1 · on-premisesHardened immutable repositoryFast local restores
Copy 2 · UnitedLayer data centerHardened immutable repositoryOffsite, independent, recoverable on its own
The 3-2-1-1-0 rule, covered
  1. 3copies of your data: production plus two backups
  2. 2different storage media
  3. 1copy offsite, in a UnitedLayer data center
  4. 1copy immutable (Double-Play makes it two)
  5. 0errors, proven by malware scans and restore tests
Readiness check

Would your data
survive a bad week?

Answer eight quick questions about how you protect data today. Nothing is sent anywhere; the
result stays in your browser.
0of 8
GETTING STARTED

Answer a few questions

Your score and gaps appear as you go.

Your gaps, and how we close them
  • Your gaps will appear here.
How it works

From exposed to
protected in five steps

What’s included

Everything your data
needs, managed

Fully managed

Data protected in transit and at rest.

Key management

Keys managed and rotated for you.

Access control

Strict policies, authorized personnel only.

Backup services

Regular backups with quick
restoration.

Immutable copies

Double-Play immutability, powered by Veeam.

Data loss prevention

Sensitive data found, masked and
tokenized.

Security monitoring

Continuous scanning for threats.

Incident response

Fast detection and mitigation.

Compliance support

HIPAA, PCI DSS and GDPR, with reports.

Disaster recovery

Plans that limit downtime from attacks or disasters.

Private cloud option

Sensitive data kept inside your own infrastructure.

Broad coverage

Public and private clouds, servers and storage.
ProtectsVMwareHyper-VNutanixProxmoxOpenStackAWSMicrosoft AzureGoogle CloudOracle CloudLinuxOracle SolarisIBM AIXNetAppAmazon S3DellQuantum
Customer stories

Resilience our customers rely on

Banking · Oracle
15-min RPO · 1-hour RTO
Production in San Francisco, recovery in Las Vegas, DR drills twice a year and annual security audits.
Oil and gas
Zero RPO · 30% lower cost
VMware stretched cluster across three US data centers, with redundant AWS connectivity.
Media
Secure, monitored private cloud
Caged racks, biometric access, and UnityOne AI™ for unified management and monitoring.
Energy utility
Every asset accounted for
Asset discovery and cost analysis across hybrid, multi-cloud and edge.
Side by side

Backups alone are
not data protection

AreaDo-it-yourself backupsBasic backup serviceUnitedLayer DPaaS
Ransomware-proof copiesOften deletable with admin rightsSometimes, as an add-onTwo independent immutable copies
Encryption and keysYours to set up and rotateStorage encryptionIn transit and at rest, with key management
Data loss preventionSeparate tool, if anyNot includedDiscovery, masking and tokenization
Monitoring and responseYour team, when it noticesJob alertsContinuous threat monitoring and incident response
Proving it worksRestores tested rarelyJob success reportsMalware scans, restore tests and compliance reports
ComplianceMap controls yourselfLimitedHIPAA, PCI DSS and GDPR support
Disaster recoveryA second site to buildRestore onlyBusiness continuity and DR plans
Questions

What teams ask before they start

How do encryption and access control protect our data?

Data is encrypted in transit and at rest, keys are managed for you, and strict access policies make sure only authorized personnel can reach sensitive information.

What makes the backups ransomware-proof?

Immutable storage. With Double-Play, powered by Veeam, two hardened repositories, one on your premises and one in a UnitedLayer data center, hold copies that cannot be changed or deleted until their retention period ends, even by someone with admin credentials.

How fast can we recover?

Regular backups and tested restores mean quick restoration after an outage. Recovery targets are set with you; for example, a banking customer runs to a 15-minute RPO and 1-hour RTO with recovery in Las Vegas.

Which regulations do you support?

HIPAA, PCI DSS and GDPR, with detailed compliance reports that show adherence to auditors.

How does data loss prevention work?

DLP automatically identifies sensitive data and uses masking and tokenization to stop unauthorized access or sharing.

What happens if an attack is detected?

Continuous security monitoring scans for threats, and incident response detects and mitigates them quickly, with clean restore points ready if data needs to come back.

Can our data stay in a private cloud?

Yes. DPaaS in a private cloud keeps sensitive data inside your own infrastructure for privacy, policy control, application performance and disaster recovery.

↑