Skip to main content
WanderVerse › Products › WanderBackup
Pipeline — Help Shape It

WanderBackup

Zero-knowledge encrypted backup — law enforcement subpoena response: we hold encrypted blobs, we have no keys, we cannot comply.

Privacy & Infrastructure
ReplacesiCloud (Apple CSAM scanning / law enforcement compliance) / Google One (content scanning)
Open-source baseSyncthing / Backblaze B2

About

iCloud, Google One, and Dropbox comply with law enforcement data requests and scan content. For DV survivors, activists, and anyone with sensitive data, corporate cloud backup is a risk. WanderBackup uses Argon2id key derivation — keys are in-memory only during backup operations, never persisted anywhere. WanderVerse literally cannot comply with a subpoena for your content. Three tiers: Config backup ($3/month, <50MB), Local full backup (free, WanderNode Hub), Off-site encrypted backup ($5-10/month, zero-knowledge). Flee Backup: DV survivors pre-configure a priority file set that syncs instantly before leaving an unsafe situation.

✦

Features

  • Zero-knowledge: encryption happens on device before any data transmitted — WanderVerse cannot read your backup
  • Argon2id key derivation: key never stored or transmitted — subpoena response: 'we have no keys'
  • Flee Backup: pre-configured priority files sync instantly when WanderAway triggers planned exit
  • Remote wipe: if WanderNode Hub is at an unsafe location, authorized user can wipe it remotely
  • Config backup: device settings, WanderOS profile, contacts — restore who you are after device loss
  • Local tier: encrypted backup to WanderNode Hub — Syncthing-based, 30-day version history
  • Off-site tier: Backblaze B2 or self-hosted Storj — zero-knowledge, off-site redundancy
  • Medical data: separate Argon2id-derived key from separate passphrase — independently secured
  • Shamir SSS key recovery: trusted contacts can recover your key without WanderVerse involvement
  • WanderCar integration: dashcam footage backs up to local NVMe before loop overwrites
Hand-assembled

Built by supported employment workers — people with intellectual disabilities, autism, and physical disabilities — through WWP's fulfillment program. Every product ships with a Built By card. Competitive wage, never 14(c) subminimum.

Repair & refurb

Send it back. Prepaid label. Component-level repair, module upgrades, firmware updates. 7-year spare parts guarantee. Donate on return — refurbished hardware goes to shelter and community partners. GPL firmware: the device works even if WanderVerse shuts down.

No hardware subscription — ever

BMW charged $18/mo for heated seats already in your car. GM locked remote start. Eero charges for VPN on hardware that could run it free. We don't do that. You bought it, you own it — every feature works forever, no subscription required. WanderAssist ($9/mo optional) is a convenience layer, never a gate. Safety features are never paywalled.

Pro & Lux tiers — coming

Every WanderVerse hardware product will offer Pro and Lux finish tiers — premium materials and handcrafted finishes by WanderVerse Artisans: supported employment workers with artistic skills. Each Lux unit ships with a Finished By card. Lux revenue cross-subsidizes nonprofit pricing.

← All products WanderVerse home Founding Member Investor Waitlist