Pixerbook Datasafe
A failed card is not a bad day.
It is the end of a studio. There is no apology, no discount and no reshoot for a wedding. Datasafe exists because the backup most studios have is one external drive, on the same desk, that nobody has ever tried to restore from.
- RAW safe
- Finals safe
- Restore verified
What it does
The one thing you cannot lose.
Encrypted offsite backup and archive for every shoot. Because a failed card on a wedding is not a bad day — it is the end of a studio.
01
It backs up events, not folders
Generic backup software knows about directories. It cannot tell you whether the Sharma wedding is safe, which is the only question you will ever actually ask. Datasafe is organised around the event, so the answer is a name and a date rather than a path.
- Per-event status: cards in, RAW safe, finals safe
- Shares the event record with the Pixerbook Platform
- Warns when an event has finals but no archived RAW
- A dashboard you can read in five seconds before bed
02
Cards in, before anything else happens
The dangerous window is between the card coming out of the camera and the second copy existing. The agent watches for cards, copies with checksum verification, and will not mark a card safe on a partial read — so "I think I offloaded it" stops being a category of thought.
- Automatic card detection and offload
- Checksum verified on every file, not sampled
- Refuses to report success on a partial copy
- Second local copy plus the offsite upload
03
Encrypted in a way that means something
Files are encrypted on your machine before they leave it, and stay encrypted at rest. We cannot read your clients' photographs, which is the correct arrangement and also the honest reason we cannot recover your data if you lose your key — so key handling is part of onboarding rather than a checkbox.
- End-to-end encryption, keys held by you
- Encrypted at rest with per-event separation
- Key escrow available if you would rather we held a copy
- Transfer over TLS, resumable on a bad connection
04
Restores tested on a schedule, not assumed
An untested backup is a rumour. Datasafe restores a sample from real archives on a schedule and reports whether it worked. If a restore fails you hear about it that week, not in the year you need it.
- Scheduled automatic restore verification
- Full-event restore drill you can trigger yourself
- Report per event, with the date last verified
- Alerts when an archive has not been checked
05
Retention that follows the contract
You do not need every RAW file from 2019 forever, and in several jurisdictions you are not supposed to keep client material indefinitely without a reason. Retention rules are set per client and per contract, and deletion is scheduled and logged rather than done in a panic when storage fills.
- Retention period per client and per contract type
- Scheduled, logged deletion with advance warning
- Legal hold on an event to stop automatic expiry
- Export everything and leave, whenever you want
Desktop app
Native on Mac and Windows.
One licence, both platforms, and project files that open on either — so a designer on a Mac and one on Windows can hand work back and forth with nothing to convert. It is a desktop application because it moves gigabytes of full-resolution files around, and a browser tab is the wrong place to do that.
There is nothing to download yet. In build means in build.
Requirements
- macOS 12 Monterey or later — Apple Silicon and Intel
- Windows 10 (64-bit) or Windows 11
- 4 GB RAM, and a wired connection for the first full backup
- Runs in the background; no dedicated machine needed
Pricing
Datasafe, on its own.
One subscription for this product only. Nothing here is a bundle, and you are never charged for a product you have not asked for.
Roughly 25–40 weddings of RAW plus finals.
2 TB archived
- Unlimited machines in one studio
- Card offload with checksum verification
- End-to-end encryption, keys held by you
- Scheduled restore verification
- No egress charge to restore your own files
For a full back catalogue, or a multi-shooter year.
10 TB archived
- Everything in 2 TB
- Per-contract retention rules
- Legal hold and audit log
- Priority restore queue
- Named contact for recovery incidents
Prices exclude GST/VAT, applied per your billing address. Monthly plans can be cancelled at any time. Ask about multi-branch studios.
Questions
Before you ask.
It says In build. Can I buy it?
Not yet, and we will not take money for it until it works. In build means exactly that. You can ask to be told when it opens, and if you have a back catalogue you are worried about, say so — the first studios on it will be the ones with the most to lose.
What does it cost to get my files back?
Nothing. Restores are included and there is no egress charge, on both plans. A backup you have to pay to use in an emergency is not a backup, and charging for recovery at the worst moment of someone's year is not a business we want to be in.
Where is the data stored?
That question deserves a specific answer rather than a vague one, and we are not going to publish a region until the infrastructure is final. Ask before you commit and you will get the actual answer, including which provider, which region, and what happens if we stop trading.
Does it replace my external drives?
No — it is the offsite copy, and you should keep a local one. The agent maintains a second local copy as well, so a normal setup is: the card, a local drive, and Datasafe. That is the 3-2-1 rule, with the offsite part actually done.
Works with
Separate subscriptions.
One client record.
Datasafe is complete on its own. If you do add another product, they share the same client and event — so nothing is ever typed twice. You still buy them separately, and you can stop one without touching the other.
Request a demo
See it on your
own work.
Thirty minutes over Zoom, Meet or Teams — your choice. Send us one past event beforehand and we will set the demo up with your own photographs instead of a sample dataset.