Zero Data Loss Recovery Appliance

Oracle's Zero Data Loss Recovery Appliance is an engineered data protection solution that helps eliminate Oracle Database data loss exposure throughout an organization. Changes to mission-critical databases are logged to Recovery Appliance as they occur, enabling customers to recover protected databases to within less than a second of when an outage or ransomware attack occurs. An automated, incremental-only approach to backups with validation on Recovery Appliance eliminates the need for time-consuming full backups and frees database server and administrative resources for production work. Recovery automation, backup immutability, and a high-availability architecture help organizations meet government requirements for protecting and rapidly recovering crucial data.

Watch the video (1:47)

Zero Data Loss Recovery Appliance features

Oracle Database integrations

Real-time redo transport enables continuous data protection

Oracle Database changes are sent from database server memory to the Recovery Appliance, where they are logged in real-time, protecting customer databases with sub-second recovery point objectives.

Incremental forever backups accelerate protection

Automated, incremental forever backups protect customer databases up to 50X faster than traditional methods, as described in the Energy Transfer video.

Backup validation improves recoverability

Recovery Appliance uses its knowledge of internal Oracle Database formats to validate backups when received and during their creation, ensuring that customer databases are always recoverable. This is crucial for ransomware protection, where data can be infiltrated in any location without warning. Backups are the critical, final layer of defense to ensure business recovery.

Virtual full backups accelerate recoveries

Recovery Appliance automatically generates a virtual full backup at the start of the recovery process, enabling up to 8X faster recoveries compared with traditional approaches, as described in the Energy Transfer video.

Copy to cloud improves disaster recovery

Databases can be protected in offsite locations using built-in capabilities for archiving backups to Oracle Cloud Infrastructure or replicating them to remote Recovery Appliance systems.

Learn more

High availability and performance

Redundant design increases availability

A scalable design with no single-point-of-failure and fault resiliency allows IT teams to protect and recovery customer databases across component, server, and storage failures.

Proactive fault management increases availability

Built-in automation proactively checks for potential failures and repairs or disables these components to ensure availability of the appliance. Automatic logging of maintenance requests reduces system administrator workloads and accelerates repairs.

Scalability enables data protection as a service

Starting with 2 PB of virtual full backup capacity and easily scaling to more than 282 PB, Recovery Appliance has the flexibility to protect databases throughout the enterprise.

High throughput protects enterprise databases

Recovery Appliance sustains up to 35 TB per hour of data protection performance per rack, the equivalent of 350 TB per hour of virtual full backups, so database administrators (DBAs) can rapidly back up and recover databases. Each system can be scaled up to 18 racks, providing 630 TB per hour throughput and letting enterprises protect more than 6 PB per hour of database data with virtual full backups.

Validation offload improves database performance

Optimizations with Oracle Database, including backup validation offload to Recovery Appliance, reduce database server overhead by up to 25% (PDF) so customers' production databases run at the highest possible performance during backups.

Learn more

Management integrations

Dedicated network connection with Oracle Exadata optimizes throughput

Recovery Appliance now provides a configuration option to add 100 Gb top-of-rack (ToR) switches, enabling direct connectivity for Exadata-hosted protected databases, thereby offloading data center network traffic and boosting throughput.

Automated operations eliminate manual tasks

Recovery Appliance automation reduces database administrator (DBA) workloads, eliminating up to 80% of the manual tasks required to back up and recover a database.

Built-in integration lower costs

Built-in, full-stack integration reduces customers’ hardware requirements and management workloads, lowering total cost of ownership (TCO) by over 30% compared to traditional, purpose-built backup appliances.

Policy-based protection enhances recoverability

Database administrators (DBAs) define multiple tiers of data-protection policies and apply them to different classes of databases throughout the enterprise, optimizing recoverability while managing costs.

Unified cloud management simplifies database administration

Oracle Enterprise Manager Cloud Control gives database administrators (DBAs) a complete, end-to-end view of the data-protection lifecycle, so they can quickly understand database status, identify issues, and take corrective actions.

Continuous monitoring simplifies compliance

Continuous monitoring of database recoverability with built-in alerting and report generation make it easier for enterprises to meet compliance requirements.

Core capabilities

Protect Oracle Database on any platform

Recovery Appliance simplifies Oracle Database protection in customer data centers with backup, recovery, and archiving of databases running on Oracle engineered systems and virtually any server/operating system combination.

Automation reduces human errors

Automated database protection, validation, and recovery of customer databases eliminate many human errors, reducing the likelihood of database administrators (DBAs) ever having to do a manual recovery.

Backup and Recover Anywhere

Database-aware backup synchronization automatically occurs between systems in a replication configuration. This allows backup and recovery service level agreements (SLAs) to be preserved in virtually any failure scenario, whether affecting the database or appliance.

Retention goals enforced throughout backup lifecycle

Recovery goals for the database are policy controlled, so customers can customize protection for replicated backups and archiving to Oracle Cloud Infrastructure or tape systems.

Oracle Recovery Manager (RMAN) integration eliminates retraining

Database administrators (DBAs) utilize familiar RMAN techniques to protect and recover databases, simplifying the implementation of data protection as a service across the enterprise.

Learn more


Space-efficient, encrypted backups with Recovery Appliance allow you to enhance data security and keep storage consumption to a minimum using an incremental forever backup strategy. Compression and encryption are performed in-memory during the backup.

Centralized administration increases security

Centralized application of data-protection policies ensures that local database administrators (DBAs) can’t accidentally or maliciously delete backups, while role-based administration limits unauthorized access to them.

End-to-end validation protects against attacks

Identifying an inconsistent backup is key to uncovering malware or ransomware attacks. The Recovery Appliance checks all incoming and replicated backups for Oracle block correctness, allowing administers to immediately quarantine systems and conduct further investigations.

Hardened system architecture reduces risks

The Recovery Appliance is built using the rigorously tested, industry-hardened Exadata architecture. This architecture helps reduce an IT organization's overall surface area of attack through consolidation and consistent secure management of database backups.

Immutability of backups protects against accidental/malicious deletion

Immutable backup preserves integrity of backup data and often used as a last line of defense layer against malware and ransomware attacks. Some industries are requiring this increased layer of backup security to address compliance regulations.

Independently assessed as compliant with key financial regulations

Recovery Appliance has been assessed as compliant with US Securities and Exchange Commission Rule 17a-4(f), Financial Industry Regulatory Authority Rule 4511(c), Commodity Futures Trading Commission Rule 1.31(c)-(d), and the EU’s Markets in Financial Instruments Directive II Delegated Regulation Article 72(1) requirements as described in the Cohasset Associates Compliance Assessment Report (PDF).

Backup retention capabilities to address legal hold requirements

At times an exceptional retention state is required to preserve backups for legal discovery and and forensics purposes. Backups may be designated “Legal Hold” and will not be deleted until the “hold” requirement is removed.

Learn more

Lower costs

Lower system pricing cuts infrastructure costs

Recovery Appliance base system pricing has decreased 50%, which when combined with increased storage capacity lowers an organization's operational costs. Regardless of size, all deployments cost less since they start with a base system and benefit from increased storage capacity.

Consolidation and data reduction reduce enterprisewide costs

Consolidating enterprisewide database protection while using database-aware compression and deduplication eliminates inefficient, standalone solutions and shrinks storage requirements by up to 40%, as discussed in Swisscom’s video (1:31).

Eliminating unplanned downtime increases revenue

Optimized recovery of Oracle databases lets customers rapidly restore and recover databases, shortening unplanned outages and minimizing downtime.

Automation reduces administrative costs

Recovery Appliance automation simplifies backup and recovery operational management, improves database administrator (DBA) productivity, and lowers costs by reducing manual processes—including error-prone manual data protection tasks—by as much as 80%.

Incremental-forever backups reduce networking costs

Efficient server-side awareness of database changes dramatically reduces backup network traffic, lowering customers’ operational expenses.

Recovery Service in OCI

Recovery Service brings real-time data protection to OCI

Built on the proven technology foundation of Zero Data Loss Recovery Appliance, Recovery Service adds end-to-end cloud automation for ease of use and cloud economics that make higher availability and resiliency available for any size organization or budget.

Cloud automation makes database backups easy

Configure automatic backups and optionally enable real-time data protection for continuous transaction protection in less than five clicks. Recovery is just as easy—simply choose the desired recovery point, including the latest point possible, a user-specified time, or user-selected system change number, and click to restore the database.

Enforced backup encryption provides high security

Backup encryption is enforced for all protected databases, providing increased security by rendering backups unusable without encryption keys—which are never stored on Recovery Service.

Backup retention safeguards protect against accidental or malicious deletion

Recovery Service enforces a 14-day minimum recovery that can be extended to 95 days. Backups can’t be arbitrarily deleted by the user, and if a protected database is deleted its backups will be retained for a minimum of 72 hours, providing a buffer period that lets the database be recovered after an accidental deletion.

Choice of subscriptions reduces cost for lower-tier databases

For databases with less stringent service-level agreements, customers can minimize costs by using Oracle Database Autonomous Recovery Service, which includes all capabilities except real-time data protection.


Energy Transfer accelerates database protection by up to 48X

George Mamvura and Javier Ruiz from Energy Transfer describe how Oracle's Recovery Appliance eliminated do-it-yourself complexity and provided peace of mind not available with other solutions.

Swisscom cuts DIY data protection complexity and risk

Find out from Christoph Lutz, head architect at Swisscom, how they use Oracle's Recovery Appliance to eliminate IT complexity, reduce storage and integration costs, and reduce risk for leading customers throughout Switzerland.

METRONOM accelerates backups of 4PB databases by up to 30X

METRONOM, the IT subsidiary of Metro, a leading specialty food distributor and retailer, uses Oracle's Recovery Appliance to simplify protection of Oracle Databases and make DBAs more productive.

Evergy energizes Oracle Database backup and recovery

“I am very relieved we can count on Oracle’s Zero Data Loss Recovery Appliance. We spent so much time with refresh tasks, now the DBA team’s productivity has improved significantly, we have the protection of our Oracle databases under control at any time through Enterprise Manager and the confidence that, in case we need an urgent restore, we will be able to perform it very quickly and up to the latest transaction.”

Nazrul Islam
Manager of Database Services, Evergy

Zero Data Loss Recovery Appliance use cases

  • Limit the impact of cyberattacks

    Continually protect Oracle databases with secure systems and mitigate the impact of cyberattacks with rapid database recoveries to any point in time.

    Read the brief (PDF)

  • Improve database performance

    Recovery Appliance offloads resource-intensive backup and recovery processes, such as period full backups and backup validation from database servers, freeing up CPU resources for production database operations.

    Read the blog

  • Reduce data loss exposure

    Automatically protect database change data as it’s created and protect it with a highly available data-protection system to reduce the risk of short- and long-term data loss.

    Watch the video (15:12)

  • Centrally manage data protection

    Consistently protect Oracle databases across the enterprise with customer-defined recovery policies, and use built-in monitoring to determine whether they’re meeting their recoverability SLAs.

    Read the brief (PDF)

  • Cut downtime costs in half

    Reduce the duration and financial impact of unplanned downtime with automated recoveries that take less time than with traditional backup and recovery appliances.

    Watch the video (15:14)

  • Protect Oracle databases running in OCI

    Provide zero data loss protection and fast, predictable recovery for your Oracle databases running on OCI with the new Oracle Database Zero Data Loss Autonomous Recovery Service.

April 26, 2024

Zero Data Loss Recovery Appliance Architectures for Ransomware Protection and Cyber-Resilience

Marco Calmasini, Oracle Senior Principal Product Manager

Oracle’s Zero Data Loss Recovery Appliance Engineered System is designed with recovery in mind, offering the best possible protection for Oracle Databases. Today’s most critical recovery scenario is ransomware recovery.

The Recovery Appliance includes features that make it intrinsically resilient to attacks that target its recovery capabilities by disabling backup operations, deleting backups or, in general, making them useless. It also maintains encryption for the complete lifecycle, from the database to the different backup tiers, so exfiltrated backups are not useable for restore.

Read the complete post

Other areas of interest

Oracle Exadata X10M

The fastest, most scalable place to run Oracle Database


Get recovery peace of mind

Autonomous Database on Exadata Cloud@Customer X10M

A fully autonomous database in your data center


Recovery Service in OCI

Get started


Learn about Recovery Appliance.

Contact us

Contact an Oracle Expert about Oracle’s Zero Data Loss Recovery Appliance.