VaultFuzionVaultFuzionBY KAPARDYN
← Back to Kapsul8
Kapsul8 EndpointBackup

Backup for Windows endpoints.
Built for the MSP channel.

Desktops, laptops, and servers — all protected by one engine, in your VaultFuzion Partner Portal. ZAR-priced. POPIA-aligned. South African data residency.

SA-Native
Endpoint backup data stays in South Africa. POPIA-aligned by default. No cross-border flow of your backed-up endpoint data.
Evidence-Grade
Every backup, restore, retention action, and key access is hash-chained into a tamper-evident audit ledger.
MSP-First
Manage your entire portfolio from one Partner Portal. ZAR-priced. Multi-tenant isolation built in.

Tiered for every tenant.

MSP wholesale pricing in US Dollars. Resale margin is yours to set.

Commitment period
12-month commitment with 5% off list. Standard MSP partner term.

Base

Essential workstation backup for cost-conscious tenants

Workstation / Laptop
$1.70
per Endpoint
List $1.79 · 1-year commit
Windows Server
—
Per workstation / month · USD · BYOS (customer storage)
  • ✓Daily backup (image + file)
  • ✓File · folder · folder-tree restore
  • ✓Bare-metal recovery (BMR)
  • ✓30-day retention with auto-expiry
  • ✓Windows 10 / 11 workstations and laptops
  • ✓BYOS — configurable to storage of your choice
  • ✓POPIA-aware SA data residency
  • ✓AES-256 encryption with per-tenant keys
  • ✓BitLocker-aware backup
  • ✓Tamper-evident audit ledger
  • ·Server endpoint backup
  • ·System state + on-prem app-aware writers (Active Directory · SQL Server · Exchange Server · IIS · Hyper-V)
  • ·Pro-Accelerator (sub-hourly image cadence)
Minimum75 Endpoints
Choose Base
Recommended

Pro

Full BMR + system state. Servers included. Pro-Accelerator optional.

Workstation / Laptop
$2.84
per Endpoint
List $2.99 · 1-year commit
Windows Server
$11.39
per Server
List $11.99 · 1-year commit
Workstation $2.99 / EP · Server $11.99 / srv · per month · USD · BYOS
  • ✓Daily workstation backup · Hourly server image backup (Pro-Accelerator built in)
  • ✓Six restore modes — file/folder · BMR · system state · point-in-time · cross-endpoint · restore-to-VM
  • ✓Calendar-first snapshot picker (operator browses by date, sees per-day snapshot counts)
  • ✓Guided System State restore — operator-confirmed Registry / Task Scheduler / COM+ writer recovery
  • ✓RMM-deployable bulk System State rollback — push a single .ps1 across many endpoints with 9-layer safety guardsNEW
  • ✓Configurable retention (default 90 days)
  • ✓System state + on-prem app-aware writers (Active Directory · SQL Server · Exchange Server · IIS · Hyper-V)
  • ✓Windows 10 / 11 + Windows Server 2016 / 2019 / 2022
  • ✓BYOS — configurable to storage of your choice
  • ✓POPIA-aware SA data residency + POPIA reporting dashboard
  • ✓AES-256 encryption with per-tenant keys
  • ✓BitLocker-aware backup
  • ✓Tamper-evident audit ledger
  • ✓Legal hold integration
Optional Add-ons
Pro-Accelerator (workstation)
R399.99 one-time per workstation
Sub-hourly image cadence + application-consistent capture on workstations. Recommended for executive laptops and high-delta dev machines. Already included on every Pro server.
Restore-to-VM
R499.99 per workstation · R1,499.99 per server
On-demand VHDX export, ready to attach to Hyper-V, VirtualBox, or AWS. Usage-based, not recurring — billed only when you materialise a restore.
AD authoritative + GPO surgical restore
R899.99 per protected domain controller / month
Recover deleted AD users / OUs / groups by SamAccountName or restore individual GPOs by GUID after ransomware or insider tampering. ntdsutil + PowerShell scripts generated under chain-of-custody, executed under DSRM with 3-eyes approval (operator + DPO + executor). MSP_ADMIN role + AD_GPO_RESTORE add-on required.
Minimum100 Endpoints
Start with Pro
Coming Q3 2026

Elite

Evidence-grade for regulated industries

Workstation / Laptop
Coming Q3 2026
Windows Server
Coming Q3 2026
Pricing announced at launch · Register interest
  • ✓Everything in Pro, plus:
  • ✓15-minute Continuous Data Protection (CDP)
  • ✓Automatic ransomware detection + rollback
  • ✓Restore-as-VM (Hyper-V / AWS / on-prem hypervisors)
  • ✓RMM integration (NinjaOne, Datto RMM, ConnectWise Automate) — one-click fleet recovery script deploymentQ4 2026
  • ✓7+ year retention (configurable, custom templates)
  • ✓Customer-managed storage (BYOS) with cross-region replication option
  • ✓Forensic-grade hash-chain audit exports
  • ✓Custodian notification workflow
  • ✓Quarterly restore-test attestation
  • ✓24×7 priority support with 1-hour support-response SLA (support response time, not a recovery-speed guarantee)
  • ✓Named Customer Success Manager
Join Elite waitlist
Pro-Accelerator Add-On
Sub-hourly cadence.
Faster restores.
SERVERS
Pro-Accelerator is included by default on every Pro server endpoint. Hourly image cadence, application-consistent backup, target RTO ~1–2 hr on standard server hardware (a target, not a guarantee; actual recovery time depends on data volume and your network).
WORKSTATIONS
Optional R399.99 one-time per workstation. No monthly upcharge. Recommended for executive laptops, design workstations, and high-delta development machines where intra-day restore points matter.

All prices in US Dollars (USD), exclusive of local taxes. MSP wholesale pricing — resale margin is yours to set. Storage is BYOS (Bring-Your-Own-Storage) — configurable to any S3-compatible storage backend you choose. The customer pays their chosen storage provider directly. No storage pool, no per-GB overage from VaultFuzion. Minimum endpoint commitments apply per tier as shown on each card. A one-time per-tenant onboarding fee applies — quoted during proposal and scaled by commitment length. For complete pricing terms, commitment-period mechanics, and forward-pricing policy, see our Terms of Use and Fair Usage Policy.

Onboarding

What onboarding includes.

Every new tenant goes through a structured onboarding before agents are deployed. It covers the real work of standing up dedicated, isolated infrastructure for that customer — and the steps are the same on every tenant so you know exactly what's being delivered.

01
Dedicated tenant provisioning
Each tenant gets dedicated, isolated infrastructure — its own backup VM, hardened OS, LUKS-encrypted disk, a dedicated S3 bucket on your chosen storage backend, application-enforced legal hold with a tamper-evident audit trail, and a per-tenant AES-256 encryption key derived from VaultFuzion KMS.
02
Rebranded agent + deployment pipeline
Windows MSI installer rebranded with VaultFuzion code-signing, NinjaOne (or your RMM of choice) deploy script generated, enrollment tokens issued for each endpoint.
03
Pro-Accelerator activation (servers + opt-in workstations)
Pro-Accelerator is activated by default on every Pro server endpoint and is available as an optional R399.99 one-time add-on per workstation. This unlocks sub-hourly image cadence, application-consistent capture, and faster restore times. Activation cost is included in the standard onboarding fee for servers.
04
Restore-drill validation
Before production handover, a documented restore drill on a sample set of endpoints confirms the chain works end-to-end. Sign-off is in writing.
Why a one-time onboarding step? Endpoint Backup runs on dedicated per-tenant infrastructure for security and isolation reasons — your tenant's backups never share infrastructure with another customer. That isolation requires real stand-up work that the monthly subscription doesn't amortise. The onboarding fee covers that work once, predictably, and is documented in your subscription agreement. Figures are quoted per tenant during the proposal stage and depend on tier (Base or Pro), Windows endpoint count, and any optional add-ons (such as the Pro-Accelerator workstation add-on at R399.99 one-time per workstation). Talk to your VaultFuzion partner manager for an exact quote.

What every tier ships with

Windows agent
Code-signed MSI deployable via NinjaOne, Intune, or GPO.
POPIA storage
BYOS to any S3-compatible backend, with application-enforced legal hold and a tamper-evident audit trail. Optional court-grade WORM via held-backup export to an Object-Lock bucket. Use an SA-resident provider for POPIA-grade residency.
Single console
VaultFuzion Partner Portal — manage your entire portfolio in one place.
ZAR billing
Single rand invoice. No FX rebill. No surprise AWS bills.
AES-256-GCM encryption
Per-tenant keys derived from VaultFuzion KMS.
Audit chain
SHA-256 hash-chained event log for forensic defensibility.
BitLocker-aware
Reads above the BitLocker layer; re-encrypted with tenant key.
NinjaOne compatible
Your existing RMM stays in place. We integrate cleanly.
Important Disclosures
  • •Initial scope is Windows 10, Windows 11, and Windows Server 2016/2019/2022. macOS and Linux endpoints are NOT supported in current tiers.
  • •Endpoint Backup protects on-premises Windows machines. Microsoft 365 cloud data — Exchange Online mailboxes, SharePoint Online, OneDrive for Business, and Teams channels — requires Kapsul8 M365 Pro Backup, a separate product. Locally-synced OneDrive files captured by Endpoint Backup do not substitute for cloud-side M365 protection.
  • •Base runs a daily backup. Pro adds hourly image backup on servers (Pro-Accelerator included by default) and optional sub-hourly capture on workstations via the Pro-Accelerator add-on. Continuous data protection (15-min RPO) is an Elite-tier feature, available Q3 2026.
  • •Manual restore from any prior snapshot is included in every tier. Automatic agent-driven ransomware rollback is Elite-tier only and available Q3 2026.
  • •Elite-tier features are roadmap and not contractually guaranteed by current tiers. Tier upgrade from Pro to Elite will require a new agreement at the published Elite rate.
  • •Recovery times depend on data volume and customer network bandwidth. Initial backup seed for large estates (>10 TB) may benefit from a physical seed option — discuss with your partner manager.
For full terms see our Terms of Use, Fair Usage Policy, and Privacy Policy.

Ready to protect your fleet?

Talk to us about onboarding Kapsul8 EndpointBackup for your tenants.

Get Started
Back to Kapsul8