--- title: "Your own S3 storage and backups in your bucket | attendo" description: "attendo files in your company’s S3 bucket, with your encryption and retention, and a regular backup of your data in your S3, with optional malware scanning." url: "https://attendo.me/en/integrations/s3-storage" lang: "en" --- # Your files, in your own S3 Contracts, signed reports, photos of breakdowns and email attachments, in your company’s bucket instead of attendo’s. And, if you prefer, a regular backup of all your data in your S3, outside attendo. Status - Your bucket, your region, your encryption - A backup of your data in your S3 - Optional malware scanning attendo Amazon S3 - from attendo to your bucket **New files** Every attachment, in your bucket - from attendo to your bucket **Moving existing files** Copied, verified and then deleted at the source - from attendo to your bucket **Backup of your data** Database and files, in your S3 ## Your auditor asks where the files are Some companies cannot keep their files in someone else’s account: their security policy, their auditor or their industry requires them to keep them in their own cloud, with their own encryption and retention. Others do not need to move them, but they do need a copy of everything outside attendo, for business continuity. This integration covers both without your team changing the way it works. ## What it does, piece by piece Two independent pieces: your own bucket for files, and the backup of your data in your S3. ### Your bucket Region, bucket and credentials from your AWS account. attendo checks it can write, read and delete before saving anything. ### EU region If you choose a region outside the EU, the international transfer has to be confirmed, and who confirmed it is recorded. ### Moving existing files Each file is copied, verified at the destination and only then deleted at the source. If it is interrupted, it picks up what is left. ### Malware scanning With Amazon GuardDuty turned on for your bucket, a file with a threat is held in quarantine and administrators are notified. ### Backup in your S3 Database and files in your bucket, at most once a day and with an optional password. For files, only the new ones. ### Space used The total and the breakdown by bucket and by source, calculated every night. ## What travels, and in which direction Private images are served through attendo, checking that whoever asks for them can see that document. What travels between attendo and Amazon S3, in which direction and when | Data | Direction | When | | --- | --- | --- | | New files | from attendo to your bucket | On upload | | Existing files | from attendo to your bucket | During the move, after a dry run | | Reading files | from your bucket to attendo | When opened, with the permissions of whoever asks | | Backup of the database and files | from attendo to your bucket | On schedule, at most once a day | ## How to get started It is set up in Settings. We get it live with you: your IT team prepares the bucket and permissions, and existing files are moved during an agreed window. Status ### What you need - An AWS account with an S3 bucket, ideally in an EU region - An IAM user with permissions to write, read, delete and list - For malware scanning, Amazon GuardDuty Malware Protection for S3 turned on for the bucket - An agreed window for moving existing files **Typical effort.** The work is in your AWS account: bucket, permissions and, if you want it, GuardDuty. The move needs an agreed window. ### Step 1 · Bucket and permissions Your IT team creates the bucket and the user with just the permissions needed. ### Step 2 · Connection and test In Settings, attendo tests writing, reading and deleting. Without a passing test, it saves nothing. ### Step 3 · Full backup and move Before moving anything, you download a full backup of your data. Then the move is dry-run and launched. ### Step 4 · Regular backup If you want it, you schedule the backup of your data to your S3. ## What it does not do - **Switching back from the screen** Your own bucket with files in it cannot be changed from Settings: if needed, it is done with support. - **Creating the bucket** attendo does not create the bucket or the permissions in your AWS account. - **Its own antivirus** Scanning depends on Amazon GuardDuty, with its cost on your account. - **Real-time mirror** The backup to your S3 runs at most once a day, and it is not restored from Settings. - **Platform data** Call recordings, logs and platform backups stay in attendo’s storage. ## What goes with it - [Security](https://attendo.me/en/security): Data in the EU, permissions and traceability. - [SaaS and On-Premise](https://attendo.me/en/saas-and-on-premise): SaaS in the European cloud or, as a project, on-premise. - [attendo Compliance](https://attendo.me/en/compliance): Controls, policies and evidence. - [attendo + REST API](https://attendo.me/en/integrations/rest-api-and-webhooks): API v4 for the rest of your systems. [All integrations](https://attendo.me/en/integrations) Every connection, with its real status. ## Frequently asked questions ### Can I use S3-compatible storage that is not Amazon? Yes. In that case the region does not tell where the data is, and attendo asks you to confirm the transfer. ### What if my bucket rejects an upload? The upload is rejected with a clear message and administrators are notified. It is never quietly saved somewhere else. ### Do I need my own bucket to get a backup? No. The backup to your S3 is independent: files stay where they are and you receive a copy. ### Does attendo delete old backups from my bucket? No. You decide retention, with your bucket’s rules. ## Tell us what your data policy requires We will show you where your files would live, how they are moved and what your IT team would need to prepare. - With your operation, not a generic demo - A real person from our team replies - No cold calls afterwards Would you rather talk first? - Phone [+34 910 053 530](tel:+34910053530) - Email [sales@attendo.me](mailto:sales@attendo.me) - Monday to Thursday 9:30 AM to 6:30 PM and Friday 9:30 AM to 2:30 PM (Spain time)