DPDR (Dual Path Disaster Recovery) backs up mailboxes, OneDrive, SharePoint and Teams to your own storage, encrypted before it leaves the server, and restores a whole mailbox, a folder, a file or a single message from any point in time. Run it on your own server, or have Dual Path host and manage it for you.
Screenshots show the DPDR console with demonstration data.
After the first pass, a run downloads only what changed. Unchanged and moved items are never downloaded again.
A policy covers one kind of source: mailboxes, OneDrives, SharePoint sites or teams. Each has its own schedule and retention, and all of them share one encrypted, de-duplicated repository.
Pick a mailbox, drive, site or team, pick a point in time, then browse folders and search. Select what you need and restore it.
Mail and files open in the console exactly as captured in the restore point, so the right version is found without restoring several.
Two kinds of content are closed to operators who could otherwise browse and restore: everything belonging to a VIP account, and any item found to hold sensitive information.
Backups go to storage you own. DPDR can create it in your cloud account, or connect to what you already have.
Connections reach everything else: cloud drives, object storage, file servers and NAS devices. They are the endpoints of replication jobs and can also back a storage target.
A replication job copies, mirrors, snapshots or moves data between any two connections on a schedule. Preview shows what a job would change before it runs.
A storage target can be the source, so the backup repository itself gets an offsite copy. That copy opens with the same recovery key.
A job can verify its destination against the source after every run, or on demand, and reports any file that is missing or different.
Operators sign in with Microsoft 365, Okta or a password kept by DPDR. Each has one of three roles, enforced by the server on every request.
Alerts go to Slack, Microsoft Teams, any webhook, and email. Each destination chooses how much it hears.
Keep the last N restore points, a number of days, or daily, weekly, monthly and yearly points, per mailbox, drive, site or team. Reclaim space when points expire. S3 and Wasabi Object Lock is honoured.
Check the repository's structure, a sample of the data, or every stored byte. The result and its date show on the storage target.
A policy can cap how fast it downloads and confine scheduled runs to a window, such as 19:00 to 06:00. A run that reaches the end of its window finishes what it started and leaves the rest for next time.
Restores, exports, each item viewed and each recovery key disclosure are written to an audit trail with the operator's name.
The console fetches no remote assets, so it works on an isolated network. Sign-in is rate limited, and tenant and storage credentials are never returned by the API.
A new version brings its own schema changes and applies them at start. The database is copied aside first, and a database from a newer version is refused rather than damaged.
dpdr serve --demo starts a simulated tenant with mailboxes, OneDrives, SharePoint sites and teams, and mail that keeps arriving, so every screen and job can be exercised safely.
Mail and files are split into chunks, de-duplicated across everything backed up, compressed, and sealed under a key derived from a recovery key. The recovery key is shown once, when the repository is created.
# recover with nothing but the binary, the storage settings and the key
DPDR_RECOVERY_KEY=XXXX-… dpdr recover --kind s3 --config s3.json list
DPDR_RECOVERY_KEY=XXXX-… dpdr recover --kind s3 --config s3.json \
export --snapshot ID --out mailbox.zip
Showing a recovery key again requires the operator's password and is audited.
DPDR is one program with no external database. Where it runs is a choice about who looks after it, not about what it can do.
Install DPDR inside your network, point it at your storage, and run it with your own operators. Dual Path licenses it and can keep an eye on its health if you want that.
Dual Path runs the server, watches the backups, responds to alerts and carries out restores on request. Your storage can still be your own.
Backups are sealed with a recovery key before they reach storage. Whoever holds the key can read them back with a single command, with no DPDR server and without Dual Path.
These are in development or planned, and are not available yet. The order may change.