Category: security compliance
Showing 11 posts.
Michael Schmidt
Sep 20th, 2026 | 15 min read
Immutable Storage: What Actually Makes a Restore Point Unalterable
Nearly every backup product and every storage platform can set a flag that means do not delete this yet. What separates the copies that hold from the copies that quietly disappear is never the flag. It is which credential is allowed to clear it. Here are the four places retention actually gets enforced, what each one survives, and which of them an auditor will accept.
Chris Engelbert
Jun 16th, 2026 | 7 min read
FIPS Compliant Storage: A Practical Guide for Regulated Teams in 2026
What FIPS compliant storage really means, the difference between FIPS-compliant and FIPS-validated, and how to get encryption at rest that passes a federal security review without giving up performance.
Rob Pankow
Jun 16th, 2026 | 11 min read
Encrypting Kubernetes Persistent Volumes with Vault KMS
Application-level encryption and host-disk encryption both leave gaps in Kubernetes environments. Storage-layer encryption with Vault KMS encrypts NVMe/TCP persistent volumes at the storage system, meeting PCI DSS and SOC 2 requirements without any application changes.
Rob Pankow
Jun 16th, 2026 | 11 min read
Top 5 European Storage Solutions in 2026
The best European storage solutions for sovereign, self-hosted infrastructure in 2026, with an open-source focus: simplyblock, Longhorn, LINBIT, Ceph, and MooseFS, plus a clear way to choose.
Chris Engelbert
Jun 15th, 2026 | 8 min read
Top 5 European Cloud Infrastructure Providers in 2026
The leading European cloud infrastructure providers in 2026, from OVHcloud and Hetzner to Scaleway, IONOS, and Exoscale, plus the sovereign storage layer that completes the stack.
Rob Pankow
Jun 14th, 2026 | 7 min read
The European Data Infrastructure Stack in 2026
A practical, layer-by-layer guide to building a sovereign European data infrastructure stack in 2026: compute, orchestration, storage, and data, with simplyblock as the storage foundation.
Rob Pankow
May 26th, 2026 | 9 min read
Storage Testing for Fintech and Healthcare: Why Generic QA Is Not Enough
Platform engineers at regulated companies face a version of the storage reliability question that goes beyond typical availability metrics. Generic QA tests that the system recovers. Regulated workloads require a more specific answer: that the system behaves correctly under the exact failure modes that correspond to specific regulatory obligations.
Rob Pankow
Mar 18th, 2026 | 9 min read
Ransomware Recovery for Kubernetes Storage
Ransomware recovery in Kubernetes depends on immutable restore points, clean recovery workflows, and storage architecture that limits blast radius under pressure.
Chris Engelbert
Mar 10th, 2026 | 7 min read
Achieving Data Sovereignty in 2026
Data sovereignty in 2026 requires more than region selection. This guide explains how to design, operate, and scale sovereignty-by-design infrastructure with simplyblock.
Chris Engelbert
Dec 17th, 2024 | 16 min read
Encryption At Rest: A Comprehensive Guide to DARE
TLDR: Data At Rest Encryption (DARE) is the process of encrypting data when stored on a storage medium. The encryption transforms the readable data (plaintext) into an encoded format (ciphertext)…
Rahil Parekh
Oct 24th, 2024 | 6 min read
9 Best Tools for Threat and Risk Management
In today's digital landscape, managing and mitigating threats is paramount for businesses to protect their data, systems, and operations. Threat and risk management involves identifying, assessing,…