Canvas LMS Backup · Australia
Your Canvas backup has never been tested. We test it — and prove it works.
Canvas’s own recovery path closed in the May 2026 breach. Retenta runs continuous immutable backups in Australia, drills a real restore, and hands you a counter-signed Restore Verification Report — so your next audit has an answer.
May 2026 ShinyHunters / Instructure breach · 3.65 TB · 8,809 institutions · Canvas recovery loophole permanently removed
- ASQA Clause 8.1–8.2
- Essential Eight ML1
- ISO 27001 A.8.13
Built for AU education compliance owners
RTO Compliance Manager
The recovery path you quietly relied on closed in May 2026.
We give you a counter-signed restore report before the auditor asks for one.
University / TAFE Canvas Administrator
Essential Eight ML1 requires a restore test at least annually. Nobody has run one.
We run it for you, on a schedule, and produce the evidence pack.
Director of Digital Learning
Course content represents tens of thousands of hours of teaching work you can’t rebuild.
We back it up in Australia and prove it’s recoverable — before you need it.
Not sure which applies? Talk to us →
Three things, in order
Immutable backup in Australia
Continuous export of your Canvas courses to Azure Blob Storage in Australia East. Container-level WORM — nothing can be deleted or overwritten during your retention period.
Verified restore drill
We restore a real backup into a Canvas sandbox and run a verification checklist against the live Canvas API — not a spot-check, an automated test against the source of truth.
Auditor-ready evidence
You receive a counter-signed Restore Verification Report, mapped to ASQA Clause 8.1–8.2, Essential Eight ML1, and ISO 27001 A.8.13. Put it in the audit folder — it’s already in the right format.
The Restore Verification Report
After every restore drill, we produce a counter-signed report that tells an auditor exactly what was tested, when, and whether it passed.
It maps to the specific clause they’ll ask about — ASQA 8.1, Essential Eight ML1, ISO 27001 A.8.13 — and is signed by Retenta as the independent third party.
No interpretation required. No chasing logs from a vendor who may no longer be cooperative.
Restore Verification Report- Course
- Diploma of Nursing — HLT54121
- Restore date
- 14 May 2026, 02:14 AEST
- Source backup
- Immutable — AU East
sha256:9f86d081884c7d659a2feaa0c55ad015
a3bf4f1b2b0b822cd15d6c15b0f00a08
- Course structure verified
- Enrolments verified
- Submissions & gradebook verified
- Media assets verified
Counter-signed by Retenta
Independent verification — ASQA 8.1–8.2 · Essential Eight ML1
Three steps. Then you have the report.
- 01
Connect your Canvas
Read-only access via Microsoft Entra ID — we never write to your production Canvas instance. Continuous immutable backups begin in Australia East within 24 hours.
- 02
We run the restore drill
We push a real backup into your Canvas Beta environment and verify it against the Canvas API. Automated, on a schedule. You don’t need to be there.
- 03
Receive your report
You receive a counter-signed Restore Verification Report by email. Download it from your portal. Hand it to your auditor.
Not ready to start? Start here.
Download the Canvas Restore Drill Template — a step-by-step guide for running a manual restore drill on your Canvas instance, including the verification checklist and a blank restore log you can hand to an auditor. It’s the same checklist we use. Free.
What you’re comparing us against
| Retenta | Canvas native export | K16 Solutions | DIY (API scripts) | |
|---|---|---|---|---|
| Restore verification | Counter-signed report | Archiving focus | ||
| AU data residency | Azure Australia East | Instructure AU | US-based | If self-managed |
| Independence from Instructure | Breached vendor | Exclusive partner | ||
| ASQA / Essential Eight evidence pack | ||||
| Canvas-specific restore | Common Cartridge | ⚠Loophole closed | ⚠Migration focus | ⚠Partial |
| Tested and verified | Rarely tested |
One claim marked ASSUMED: auditor acceptance of the Restore Verification Report is being validated with ASQA and Essential Eight assessors. We’ll update this page when that validation is complete.
Ready to prove the restore?
- Continuous immutable backup of all your published Canvas courses in Australia East
- One restore drill per quarter (monthly on Govern tier), automated
- Counter-signed Restore Verification Report mapped to your compliance framework
- Audit log with hash-chained entries you can show an auditor
- Evidence pack: ASQA 8.1–8.2 / Essential Eight ML1 / ISO 27001 A.8.13