Storage Options

Archivus offers flexible storage options to meet your organization’s security, compliance, and performance requirements.

Storage Tiers

Storage Type Availability Description
Shared Storage All Plans Default Supabase bucket with tenant path isolation
Dedicated Storage Team+ Archivus-provisioned isolated S3 bucket
BYOB (Bring Your Own Bucket) Enterprise Use your own S3-compatible storage

Quick Comparison

Feature Shared Dedicated BYOB
Isolation Path-based Bucket-level Full control
Setup Automatic Admin request Self-configured
Compliance Standard Enhanced Full control
Data Residency Supabase region AWS regions Any provider
Encryption AES-256 AES-256 + KMS Your choice
Credential Management N/A Archivus-managed Customer-managed

Shared Storage (Default)

All Archivus accounts start with shared storage. Documents are stored in a secure Supabase bucket with tenant path isolation.

How it works:

  • Each tenant’s files are stored under a unique path prefix: {tenant_id}/documents/
  • Row Level Security (RLS) ensures tenants can only access their own files
  • Automatic encryption at rest using AES-256

Best for:

  • Individual users and small teams
  • Getting started quickly
  • Development and testing

Dedicated Storage

Teams and Enterprise customers can request a dedicated S3 bucket provisioned by Archivus.

Benefits:

  • Complete bucket-level isolation
  • Enhanced audit logging
  • Custom retention policies
  • Better performance for high-volume workloads

See: Dedicated Storage Setup

BYOB (Bring Your Own Bucket)

Enterprise customers can connect their own S3-compatible storage.

Supported Providers:

  • AWS S3
  • MinIO
  • Wasabi
  • DigitalOcean Spaces
  • Backblaze B2
  • Cloudflare R2
  • Any S3-compatible provider

Benefits:

  • Complete data sovereignty
  • Use existing cloud infrastructure
  • Meet specific compliance requirements
  • Control costs directly

See: BYOB Setup Guide

Storage Migration

When upgrading storage tiers, Archivus provides zero-downtime migration of all existing documents.

Migration paths supported:

  • Shared → Dedicated
  • Shared → BYOB
  • Dedicated → BYOB
  • BYOB → Dedicated (downgrade)

Features:

  • Zero-downtime migration
  • Progress tracking
  • Automatic retry on failures
  • Rollback capability

See: Storage Migration Guide

Security

All storage options include:

  • Encryption at rest: AES-256 encryption for all stored files
  • Encryption in transit: TLS 1.3 for all transfers
  • Access control: Multi-tenant RLS policies
  • Audit logging: All file operations are logged
  • Credential encryption: BYOB credentials encrypted with AES-256-GCM

Next Steps

Questions? Contact support@archivusdms.com

Table of contents