Data Protection

CBR takes many measures to keep data secure and reliable.

**Table 1** CBR data protection
Measure	Description
Transmission encryption (HTTPS)	To ensure transmission security, backups are stored to OBS buckets via HTTPS.
Storage data redundancy	CBR allows you to create multi-AZ backup vaults so that your backups can be stored in multiple AZs of a region. If one AZ becomes unavailable, backups remain accessible from other AZs. This multi-AZ redundancy ensures high data reliability and availability. NOTE: CBR relies on OBS's redundancy features to ensure backup redundancy. For details, see What Storage Redundancy Techniques Does OBS Use?
Backup data encryption	If a disk you want to back up is encrypted, the backups generated for this disk will also be encrypted. When such a backup is used to restore data, the encrypted backup will first be decrypted and then restored to the target disk.
Cross-region replication	Cross-region replication allows you to automatically and asynchronously replicate backups from one region to a replication vault in a different region based on a replication policy. The cross-region disaster recovery capabilities it offers can cater to your needs for remote backup.
Backup locking	To prevent backups from being deleted by mistake or maliciously, you can enable backup locking for vaults to improve data security. Once enabled, all backups in the vault enter the write once, read many (WORM) state. No one can delete the backups in their retention periods.