Skip to content
Service

Backup & restore

Daily encrypted backup of your entire WordPress installation, with 30-day retention and one-click restore. Stored within the EU. Verified every month.

A backup that actually works

It isn't enough that a backup is taken. It also has to actually restore. We've seen far too many cases where a backup pipeline ran successfully for years without anyone ever testing a restore — and when the day comes the archives are corrupt, incomplete, or encrypted with a key nobody has anymore.

With us, the backup is taken, stored securely, and tested monthly. That's the difference.

What gets backed up

  • The whole WordPress database — every table, including WooCommerce orders, ACF fields, plugin data, etc.
  • All files in wp-content — uploads, plugins, themes, language files.
  • WordPress core — so a restore is complete, even if the hosting disappears.
  • wp-config.php (encrypted separately — contains sensitive info like API keys and database password).
  • .htaccess and other root files that govern URL rewrites and security rules.

Where backups are stored

Backups are stored in Google Cloud Storage, region europe-north1 (Finland) — the same region the Oden control panel runs in. Everything:

  • Encrypted with AES-256 before it leaves your server.
  • Encrypted again at rest in the storage bucket.
  • Stored with geo-redundancy within the EU (replicated to a secondary region inside the EU zone).
  • Never leaves the EU/EEA. No US sub-processors — Schrems II concerns don't apply.
  • Removed after 30 days (Basic/Pro) or 90 days (Enterprise).

Backup schedule

  • Incremental backup every 6 hours — only changes since the last run, fast and resource-light.
  • Full backup once per day — complete snapshot of the entire installation.
  • Manual snapshots before every update — we always take a backup just before rolling out a core or plugin update, so rollback is possible in 60 seconds.
  • Weekly archive — Sunday's backup is archived separately with longer retention.

Restore — how fast it goes

  1. One-click restore via the Oden control panel — pick a backup from the list and click "restore". The backup rolls out to your site.
  2. Selective restore — just one specific file, or just the database, or just the uploads directory. For when only one component went wrong.
  3. Restore to a staging environment (Pro/Enterprise) — we put the backup in a copy of your site so you can verify everything looks right before we swap production.
  4. Disaster recovery — if your hosting is gone, we can stand up your site on a new server from the backup within 4 hours.
We test restores every month A random customer backup is restored to an isolated environment and verified monthly. Not just "checksum matches" — we actually load the site in a browser and confirm it works.

What this isn't

  • It's not your hosting's backup. Some hosts offer "daily backups" but only take them server-side, store them in the same datacenter, and have no verification routine. Our backups live in a different region, are independent of your hosting, and tested regularly.
  • It's not version control. We keep 30 days of history, not years. If you need longer retention there's the Enterprise plan (90 days) or custom.
  • It's not a substitute for git. Use Git for your code history. The backup is for disaster recovery, not development workflow.

What you can test yourself

You can click "test restore" in the Oden control panel any time. The latest backup is rolled out to a sandbox URL where you can verify everything looks right yourself. It doesn't affect production.

Which plans include it?

Backup & restore is included in every plan — it's a foundational pillar of the Oden service:

  • Basic: Daily backup, 30-day retention, one-click restore.
  • Pro: Everything above + incremental backup every 6 hours, restore to staging.
  • Enterprise: Everything above + 90-day retention, guaranteed restore within 4 hours during a hosting disaster, off-site archival as agreed.

See the full comparison on the pricing page →

What does a restore cost?

Nothing extra. Restores are included in every plan, no matter how many you need. We don't bill per restore because the day you need one isn't the day you also want a surprise invoice.

Get started

The backup routine activates as soon as we install the WEBBELi worker plugin on your WordPress. The first full backup is done within 4 hours.

See plans and pricing

GDPR

GDPR — how we handle your data.

We built Oden C.A.M around data minimization, EU hosting, and full transparency — not as an afterthought.

01

Where your data lives

All Oden data (control panel, logs, backups) is stored in Cloud Run and Firestore in the Finland region (europe-north1). Your WordPress sites run on whichever hosting you choose — if you want to move to us, we offer WEBBELi as an add-on (Scandinavian servers in Sweden). Backups are AES-256 encrypted and stay inside the EU. We use no subprocessors in the US or other non-EU/EEA countries — which means Schrems II concerns simply don't apply.

02

What data we process

Only what's needed to run your WordPress: your sites' URLs, plugin and theme versions, update history, and cryptographic keys. We never touch your visitors' data — there's no tracking pixel and no ads module.

  • Site metadata (URL, version, status)
  • Operations logs (security events, updates)
  • Backup archives (encrypted, 30 days)
  • Operator identity (your email, for support)
03

How it's protected

The connection between your WordPress and Oden goes via the WEBBELi worker plugin we install on your site — TLS 1.3 with Ed25519 keys. Stored secrets are envelope-encrypted (Cloud KMS). Audit logs are write-only and kept for 12 months.

04

Your rights

You can request access to, correction of, or deletion of your data. Email hello@oden.cam and we'll respond within 30 days (usually within 48 hours). At termination, all customer data is permanently erased within 60 days — except what we must retain under Swedish bookkeeping law (7 years).

05

Data incidents

If we confirm an incident affecting your personal data, we'll contact you within 72 hours with an initial report, in parallel with our notification to IMY (the Swedish DPA). The report covers what happened, what was affected, and what mitigations we're applying.

06

Data Processing Agreement (DPA)

A standard DPA is automatically included — no separate paperwork. It stipulates EU hosting, sub-processors (list available on request), and Swedish law as the applicable jurisdiction. Larger procurements can sign an extended agreement: hello@oden.cam.

Controller: NNi Solutions, Sweden. Questions? hello@oden.cam
Service

Get Oden C.A.M