Identify the service being purchased

A storage subscription can bundle object capacity, a browser file manager, backup monitoring, sharing, and support. Determine which work the customer still performs: scheduling jobs, managing encryption keys, checking recovery points, and restoring an application. The product boundary determines both customer value and the provider's operating burden.

Use a customer's workload as the unit of analysis. A file archive, a database backup, and a shared client folder have different write rates, retained versions, access patterns, and recovery requirements. A headline storage allowance does not describe those differences.

Separate included capacity from the full bill

NordenVault's pricing page presents tiered subscriptions with storage, team, source, support, and retention terms. It is a primary source for the company's commercial offer as reviewed on October 8, 2026. Use the detailed pricing page and contractual terms rather than copying a homepage card into a permanent comparison.

Build a workload sheet covering live data, retained versions, snapshot growth, failed uploads, full restores, and additional capacity. Record whether transfer and API usage are included and which limits apply. No public price page establishes the provider's actual costs, margins, or customer retention.

  • Live-data volume
  • Retained-copy growth
  • Restore traffic
  • Additional capacity
  • Support response scope
  • Contract exclusions

Map residency by data category

NordenVault's data-residency page distinguishes backup objects and storage metadata from authentication, billing, email, and frontend request data. Its published table places customer backup storage in Germany and lists some account services outside the EU. Attribute that table to the provider; it is not an independent infrastructure audit.

This distinction matters to the operating model because the service depends on more than its object store. Map the storage operator, application database, identity system, payment service, and delivery infrastructure separately. A backup-data location statement does not establish the location of every account event.

Test the service obligation

Support response time, restore access, retained recovery points, account recovery, and incident communication belong in the service map. Ask which commitments are contractual, how exclusions work, and which party performs a recovery. Keep the provider's marketing, documented features, contractual commitments, and measured behavior in separate evidence rows.

The resulting analysis should show where customer dependence accumulates: credentials, encryption keys, repository metadata, ongoing subscriptions, and trained operators. Standard interfaces can reduce switching work while migration and recovery still require a validated procedure.

Referenced resources

Verification checkpoint

Build one workload sheet and one dependency map, date each commercial assumption, and label every row as provider claim, contractual term, measured result, or analytical estimate.