Change note: off-site backup storage

In August 2026, CustomerNode replaced Wasabi Technologies with Backblaze, Inc. as the storage provider for off-site encrypted backups. This note records what changed and how it relates to our SOC 2 report.

What changed

Backblaze (B2 cloud object storage) now holds the off-site copies of CustomerNode's encrypted backups. The service category is identical to Wasabi's: S3-compatible object storage holding backup data that CustomerNode encrypts before upload, with encryption keys that never leave CustomerNode's infrastructure. Remaining Wasabi-held data is deleted within 90 days of the cutover.

How this relates to the SOC 2 report

Our SOC 2 Type 1 report (as of March 18, 2026) identifies Wasabi Technologies as a carved-out subservice organization for off-site backup storage. The report states that it “does not include the Cloud Hosting Services provided by Wasabi Technologies,” and the auditor did not examine Wasabi's controls. What the report lists for that role are the controls expected of any storage provider holding backup media: restricted physical and logical access, encryption at rest, media sanitization, and environmental protection.

The controls the report examines are CustomerNode's own, including that backups are encrypted with access restricted to key personnel. Those controls are unchanged by the provider change.

Subservice organization review

Before relying on Backblaze, CustomerNode reviewed Backblaze's SOC 2 Type 2 report, which addresses the same expected subservice controls, and verified backup, restoration, and immutability procedures against the new provider. The change is recorded in our vendor-change log and will be described in the next report period's system description.

See the subprocessor list and the SOC 2 report. Questions: contact us.