Skip to main content
CaseBender stores attachments, evidence, exports, quarantine objects, and ephemeral canaries in file/object storage. New installs default to a local Docker volume. You can keep that volume with any license, or point CaseBender at customer-owned S3, GCS, or Azure. See Local Storage Limitations. PostgreSQL keeps durable object identity, exact provider version, integrity, scanner, retention, hold, migration, and lifecycle state.

​
Architecture

Every deployment defines three profiles:
  • quarantine receives user-controlled uploads;
  • records holds scanner-approved durable data and generated exports; and
  • ephemeral holds canaries and short-lived objects.
The shared @cbr/storage boundary implements canonical adapters s3, gcs, azure, and local. Runtime operations include health, upload, download, exists, list, metadata, copy, delete, retention, and legal hold. Runtime never creates or configures buckets/containers and never generates signed URLs. User uploads are written behind a durable upload intent, read back and SHA-256-verified, scanned by external clamd, and copied to records only after a clean verdict. Durable mutation, migration, and reconciliation workers retry idempotently and expose dead-letter/integrity telemetry.

​
Start here

Support Policy

Current machine-readable support and qualification status

Select a Provider

Compare live certification requirements and evidence levels

Security Baseline

Quarantine, scanning, integrity, encryption, WORM, and secret controls

Backup and Restore

Protect PostgreSQL and exact object versions as one set

Migration Runbook

Copy-first cutover, ledger verification, source retention, and rollback

Health and Troubleshooting

Readiness categories, canary, scanner, CA, permissions, and dead letters

​
Provider guidance

OpenShift ODF/Ceph RGW

External OBC or standalone RGW with private CA and restricted egress

AWS S3

Existing buckets and workload identity

Google Cloud Storage

Existing buckets and Workload Identity

Azure Blob

Existing containers and Managed Identity

S3-Compatible Products

Exact-product/version live certification policy

Local and MinIO

Development-only local storage and legacy MinIO migration
Adapter or emulator success does not equal live product certification. Current ODF/Ceph RGW is qualification-ready but awaits customer credential-gated exact-version evidence.