A national government agency needed immutable recovery that satisfied two threat models simultaneously: the external attacker and the compromised insider. Offsite copies in another jurisdiction were unacceptable. Evidence had to be inspectable by the agency, not assembled from provider assurance. And legacy platforms had to be in scope alongside modern workloads. UPC Cyber Vault delivered within the sovereign perimeter — vault storage and audit trails held in-country, destructive operations requiring time-delayed multi-party approval so no single privileged account can remove protected copies, and WORM enforcement aligned to statutory record-keeping obligations.
