Often the key use for the cloud is for its scalability. An S3 bucket can contain billions of objects, but not all of those objects are important enough to backup. Clumio delivers tools to control exactly which data to backup, like by bucket, prefix (think of a prefix as a folder, and an object as a file), tag, account, region, and storage tier. 

Clumio delivers a variety of features that ensure the security of backups. In addition to backups being air gapped and immutable, data is encrypted in flight and at rest. Users can implement role-based access control, creating permissions for certain types of data by role or individual user, as well as multi-factor authentication. 

Clumio Instant Access allows you to instantly mount buckets from Clumio in a read-only format. This allows applications to use the back up while waiting for the full restore to the original source. Users see metadata for each object in the restored bucket in the CLI along with the endpoint URL. 

The AWS Shared Responsibility Model states that AWS is responsible for the security and reliability of their servers and infrastructure, whereas the user is responsible for the security and reliability of their data and applications, including access control. This means the user is responsible for ensuring they are able to restore data in case of an overwrite or deletion, whether from human error or security breach.