Kafka backup & recovery

Be ready for
the restore.

Protect the data your business runs on. Bring Kafka records, schemas and recovery controls together in your own infrastructure.

14 days. All released Enterprise features. No card or signup.

Your recovery pathYou stay in control
Source Kafka Independent backup Restore destination Records + schemasYour storage. Your retention.
↳ A separate copy. A deliberate recovery.

For the Kafka you run

Deployment guide

Enterprise is what
surrounds the records.

Your recovery depends on schemas, identities and the rules that govern your data. Bring those controls into the backup and restore workflow.

Keep schemas with your data.

Back up Confluent Schema Registry and Apicurio Registry alongside Kafka. Restore Confluent schemas before the records, preserving schema IDs where supported or rewriting IDs for an existing destination.

  • Versions, references and compatibility settings
  • Soft-deleted Confluent schema versions
  • Explicit restore strategies and validation
Explore schema recovery

Work with your security controls.

Use OAuth for Kafka and Schema Registry with OIDC providers, Azure managed identities or workload identity. Capture Confluent Platform MDS role bindings and encryption-key registry metadata.

  • Shared token caching and refresh
  • Explicit source and destination credentials
  • Offline licence verification
Explore OAuth authentication

Respect erasure when you restore.

Apply a suppression list during recovery so erased keys are dropped or tombstoned. Restore reports record the number of suppressed records and the applied list’s checksum.

  • Exact, prefix and regular-expression matching
  • Topic-scoped suppression lists
  • Refusal when a configured erasure list is unavailable
Explore restore-time erasure

Run it where
your Kafka runs.

A self-hosted CLI and container image, with Helm deployment options. Your backups go to storage you control.

One commercial licence

Covers your Kafka clusters without per-cluster licence charges.

Your operating environment

Integrate with your scheduling, retention and recovery runbooks.

Migration when you need it

MSK ZooKeeper-to-KRaft migration tooling remains included, with offset translation and signed migration evidence.

Prove the recovery.
Then choose your licence.

Evaluate against your own environment. The trial and paid licence enable the same released Enterprise features.

Evaluate

14 days to put it
through its paces.

Start with a small recovery rehearsal. Check the restored records, schemas and application behaviour in your environment.

  • All Enterprise features in the released version
  • No signup, card or sales call required
  • Self-hosted on your infrastructure
  • Keep trial state across restarts
Start the free evaluation

The installed release determines when its evaluation starts. Read the licence guide.

Before you
get started.

Questions about evaluation, licensing and what you can recover.

Ask the team
What is included in Enterprise today?

Enterprise adds Confluent Schema Registry restore, schema and encryption-key metadata backup, Confluent Platform RBAC capture, OAuth authentication, restore-time erasure suppression and MSK migration tooling to the core Kafka backup and restore engine. Commercial licences include priority support.

Mapped permission recovery is in qualification for 0.8.0. Field-level encryption, masking, general audit logging and WASM transformations are not currently shipped capabilities.

How does the 14-day trial work?

The binary includes an evaluation of all Enterprise features in the released version. No signup or payment details are required. Follow the activation instructions for your installed release. Keep trial state on durable storage across container restarts and scheduled jobs.

Follow the evaluation guide
Do you host or receive our Kafka data?

You run the software and choose the backup storage. Licence verification runs locally and does not require a connection to a licence server. The commercial portal handles purchasing and licence delivery.

Can it recover an entire Confluent environment?

Recovery is configured per supported component. Record and schema recovery do not create identities or recover credentials. Full cross-component recovery sets and application freeze controls are separate work. Plan a controlled rehearsal for your topology and review the documented restore constraints.

Check the recovery guide
What happens after I purchase?

Stripe handles payment. The portal issues a signed commercial licence file for your installation. Apply the file to continue using Enterprise features after evaluation. One commercial licence covers all your Kafka clusters.

Can I cancel, or pay by invoice?

You can cancel through the billing portal. Your paid licence remains valid through the billing period. Contact sales@oso.sh for annual invoicing, startup or community pricing.