Guide
Object Lock, native immutability, and the difference on the bill
Prices checked · Object Lock documentation checked
12 of 18 vendors document Object Lock or an equivalent write-once lock. With it, a 10 TB backup costs least at OVHcloud Object Storage Infrequent Access: $44.65 a normal month; the month you restore it all, Telnyx Cloud Storage Regular Storage costs least at $55.83. All 12 that document a lock offer one that no user, the account's owner included, can lift before its date (a compliance mode, or a locked policy at Azure Blob Storage). Oracle OCI Object Storage and Cloudflare R2 are listed apart: each has its own bucket retention rules instead of S3 Object Lock (Oracle OCI Object Storage's cannot be used on a bucket with versioning turned on; Cloudflare R2's can be removed by a bucket admin).
| Vendor and offer | Object Lock | Lock modes | 10 TB normal month | 10 TB restore month |
|---|---|---|---|---|
| OVHcloud Object Storage Infrequent Access | Yes, S3 Object Lock | Compliance and governance | $44.65 | $85.25 |
| | Yes, S3 Object Lock | Compliance and governance (US, APAC and CA buckets only) | $55.83 | $55.83 |
| IDrive e2 | Yes, S3 Object Lock | Compliance and governance | $60.00 | $60.00 |
| | Yes, S3 Object Lock | Compliance and governance | $69.43 | $69.43 |
| | Yes, S3 Object Lock | Compliance and governance | $72.67 | $72.67 |
| | Yes, S3 Object Lock | Compliance and governance | $77.00 | $147.00 |
| Hetzner Object Storage Object Storage | Yes, S3 Object Lock | Compliance and governance | $88.80 | $100.69 |
| | Yes, S3 Object Lock | Compliance and governance | $100.51 | $212.75 |
| Amazon S3 S3 Glacier Instant Retrieval | Yes, S3 Object Lock | Compliance and governance | $170.01 | $1,297.60 |
| Azure Blob Storage Cold LRS | Yes, as Azure immutability (WORM) policies | Locked policies nobody can shorten or delete; unlocked policies for testing | $170.83 | $1,347.23 |
| Google Cloud Storage Coldline | Yes, as Object Retention Lock and Bucket Lock | Compliance and governance | $185.04 | $1,498.89 |
| Akamai Cloud Object Storage Object Storage | Yes, S3 Object Lock | Compliance and governance | $200.00 | $250.00 |
| Vultr Object Storage Standard | Unclear: the vendor's pages leave a gap | Not documented | $180.00 | $280.00 |
| Tigris Archive Instant Retrieval | Not documented | Not documented | $68.59 | $348.49 |
| DigitalOcean Spaces Spaces Cold Storage | Not documented | Not documented | $70.19 | $171.71 |
| Oracle OCI Object Storage Infrequent Access | Its own retention rules, not Object Lock | Locked rules nobody can shorten or delete, after a 14-day delay; unlocked rules | $103.08 | $203.01 |
| | Its own retention rules, not Object Lock | Rules a bucket admin can remove | $120.80 | $221.70 |
| Filebase Object Storage | No | No lock | $139.70 | $139.70 |
Each vendor's cheapest offer with its strongest lock, on 10 TB kept, 1 TB downloaded in a normal month, all 10 TB in the month you restore; readable at once, with no archive restore step, where the vendor has such an offer. Lock modes as each vendor's lock documentation names them, read on 11 October 2026; Azure and Oracle use their own words, not governance and compliance.
Two kinds of lock, and who can open them
Governance modeAn administrator given the bypass permission can shorten the lock or delete early. It stops mistakes and most scripts, not someone holding that permission.
Compliance modeNobody can shorten the lock or delete the data before the date, the account's root user included. The lock opens only when its date arrives.
Either way the data is billed until the lock ends. A 90-day lock on 10 TB at Scaleway Object Storage Glacier keeps $28.51 a month on the bill for three months, $85.53 in all, even if the backup is no longer wanted after the first.
Put your own numbers through the calculator to see what this charge does to a normal month and to the month you restore.
Object Lock protects object versions under retention or legal hold
Amazon S3 Object Lock is a WORM retention control for object versions. A time-based retention period or legal hold can prevent a protected version from being overwritten or deleted while the rule applies. [1]
Governance mode allows a specifically authorized identity to bypass retention. Compliance mode cannot be shortened or bypassed during the active period, including by the Amazon S3 account root. Versioning and exact API behavior are part of what decides whether an offer qualifies. [1] [2]
Object Lock is not a synonym for every immutable-storage feature. Azure immutable Blob Storage, Google Cloud retention locks, Cloudflare R2 bucket locks, and Oracle retention rules use native controls with different APIs and bypass behavior. [3] [4] [5] [6]
| Control | Plain meaning | What it means for compatibility | Source |
|---|---|---|---|
| Governance mode | Ordinary deletion and retention changes are blocked, but an authorized bypass is possible [1] | A tool or threat model that requires non-bypassable retention cannot treat governance as compliance | [1] |
| Compliance mode | Retention cannot be shortened or bypassed during the active period [1] | Deletion waits until the rule permits it | [1] |
| Legal hold | Protection has no required fixed expiration and remains until an authorized removal [1] | Capacity can remain billable beyond an ordinary retention schedule | [1] |
| Native retention system | A vendor-specific WORM or retention control outside the S3 Object Lock API [3] [5] [6] | not comparable to S3 modes until the backup tool and required operations are checked | [3] [5] [6] |
Object Lock support: what price pages show versus vendor documentation
Our price table lists Object Lock or immutability as supported for 24 of 66 offers, unsupported for 2, and not published for 40. Many of the not published entries come from pricing pages, while separate current product documentation confirms native or S3 retention controls for some of those vendors. The table shows both so you can see where the two sources differ. [7] [1] [3]
Supported means the checked official documentation describes the required control at the stated offer scope. It does not prove every class, region, retention period, or backup tool works. not published does not mean false, and native controls remain not comparable to a tool that requires the S3 Object Lock API. [9] [29]
Show the table (18 vendors)
| Provider | Our price table, across offers | What the vendor's documentation says | Limits | Source |
|---|---|---|---|---|
| Amazon S3 | 14 yes; 2 no [7] [32] | 14 supported; Express One Zone does not apply [1] [2] | Directory buckets are outside the general-purpose-bucket Object Lock scope | [7] [1] [2] |
| Azure Blob Storage | 8 not published [7] | 8 supported through native immutable Blob Storage [3] | Uses Azure WORM controls rather than S3 Object Lock naming | [7] [3] |
| Google Cloud Storage | 9 not published [7] [33] | 9 supported through Object Retention Lock and Bucket Lock [4] [8] | Tool workflows and versioning requirements remain separate | [7] [4] [8] [33] |
| Cloudflare R2 | 2 not published [7] | 2 not comparable [5] [9] | Native removable bucket locks exist, but S3 Object Lock APIs are not implemented | [7] [5] [9] |
| Backblaze B2 | 1 yes [7] | 1 supported [10] | Each backup tool still needs its own qualification | [7] [10] |
| Wasabi | 1 not published [7] | 1 supported [11] | Documented Veeam integration requires vendor-specific configuration and Compliance mode | [7] [11] [12] |
| IDrive e2 | 1 not published [7] | 1 supported [13] | Numeric maximum retention remains not published in the documentation we checked | [7] [13] |
| DigitalOcean Spaces | 2 not published [7] | 2 not published [14] [15] | Write headers are documented, but we could not confirm that the bucket enforces retention | [7] [14] [15] |
| Scaleway Object Storage | 3 yes [7] | 3 supported [16] | A numeric maximum retention and named tool integration remain not published | [7] [16] |
| OVHcloud Object Storage | 5 yes [7] | 4 supported; Cold Archive conditional [17] [18] [19] | Two current OVHcloud FAQ pages disagree on Cold Archive Object Lock support | [7] [17] [18] [19] |
| Hetzner Object Storage | 1 yes [7] | 1 supported [20] | The documented Veeam path has configuration and license requirements | [7] [20] [21] |
| Akamai Cloud Object Storage | 1 not published [7] | 1 supported [22] | A named immutable-backup integration remains not published | [7] [22] |
| Vultr Object Storage | 5 not published [7] | 5 conditional [23] [24] [25] | Feature controls are published, but retention enforcement is not fully documented and Archive conflicts with versioning | [7] [23] [24] [25] |
| Storj | 1 not published [7] | 1 supported [26] | Numeric maximum retention remains not published | [7] [26] |
| Oracle OCI Object Storage | 3 not published [7] | 3 not comparable [6] [27] | Native retention rules are incompatible with Object Versioning and are not the S3 Object Lock API | [7] [6] [27] |
| Tigris | 4 not published [7] | 4 not published [28] | Object Lock action names are listed, but we could not confirm that retention is enforced | [7] [28] |
| Filebase | 1 not published [7] | 1 unsupported for the S3 Object Lock requirement [29] [30] | The vendor's published list of supported features omits required versioning and Object Lock operations | [7] [29] [30] |
| Telnyx Cloud Storage | 2 not published [7] | US supported; EU does not apply [31] | The current guide covers US, APAC and CA buckets; the EU bucket priced here is not one of them | [7] [31] |
Object Lock decides whether an offer qualifies before price matters
A vendor without the required retention mode, region, and backup-tool workflow is unsupported or ineligible regardless of its storage rate. Protected versions can remain billable until retention permits removal, so the retention period belongs in capacity planning. [1] [34]
Reading protected data is allowed by the WORM model. A read-only restore can incur retrieval, requests, temporary-copy storage, and egress, but it does not trigger early deletion and does not remove the retained version. [1] [35]
| Step | Question | If it fails | Source |
|---|---|---|---|
| 1. Retention control | Does the exact offer enforce the required mode and duration? [1] | unsupported, not comparable, not published, or conditional | [1] |
| 2. Backup tool | Does the tool document the vendor's immutable workflow? [12] | Unsupported tools do not enter the price ranking | [12] |
| 3. Capacity | How long do protected versions remain billable? [34] | If you cannot say how much capacity stays locked, you cannot complete a normal-month estimate | [34] |
| 4. Recovery | What retrieval, request, temporary-copy, and egress charges apply? [35] | Early deletion: does not apply for the read-only restore | [35] |
Sources
Every figure above comes from one of these pages, on the date shown. Each numbered reference in the text links to its entry here. Vendors change prices; if a date looks old, check the source. Three vendors publish a downloadable price feed and the rest are re-checked by hand, which is why the dates are not uniform.
Source pages checked 35 sources
- 1 Amazon S3 docs: Locking objects with Object Lock docs.aws.amazon.com · checked 26 July 2026
- 2 Amazon S3 docs: Configuring S3 Object Lock docs.aws.amazon.com · checked 26 July 2026
- 3 Azure docs: Immutable storage for blob data learn.microsoft.com · checked 26 July 2026
- 4 Google Cloud Storage docs: Object Retention Lock docs.cloud.google.com · checked 26 July 2026
- 5 Cloudflare R2 docs: Bucket locks developers.cloudflare.com · checked 26 July 2026
- 6 Oracle docs: Creating an Object Storage retention rule docs.oracle.com · checked 26 July 2026
- 7 Our price table (all vendors) backupstorageprices.com · checked 25 July 2026
- 8 Google Cloud Storage docs: Bucket Lock docs.cloud.google.com · checked 26 July 2026
- 9 Cloudflare R2 docs: S3 API compatibility developers.cloudflare.com · checked 26 July 2026
- 10 Backblaze docs: Cloud Storage Object Lock www.backblaze.com · checked 26 July 2026
- 11 Wasabi docs: Enabling Object Lock docs.wasabi.com · checked 26 July 2026
- 12 Wasabi docs: Veeam Object Lock integration docs.wasabi.com · checked 26 July 2026
- 13 IDrive e2: Object Lock www.idrive.com · checked 26 July 2026
- 14 DigitalOcean docs: Spaces S3 compatibility docs.digitalocean.com · checked 26 July 2026
- 15 DigitalOcean docs: Spaces API reference docs.digitalocean.com · checked 26 July 2026
- 16 Scaleway docs: How to use object lock www.scaleway.com · checked 26 July 2026
- 17 OVHcloud docs: Managing immutability with Object Lock (WORM) help.ovhcloud.com · checked 26 July 2026
- 18 OVHcloud docs: Object Storage FAQ help.ovhcloud.com · checked 26 July 2026
- 19 OVHcloud docs: Cold Archive FAQ help.ovhcloud.com · checked 26 July 2026
- 20 Hetzner Object Storage docs: Object Lock retention docs.hetzner.com · checked 26 July 2026
- 21 Hetzner Object Storage docs: Setting up Veeam docs.hetzner.com · checked 26 July 2026
- 22 Akamai Object Storage docs: Object Lock techdocs.akamai.com · checked 26 July 2026
- 23 Vultr docs: How to manage Object Storage buckets docs.vultr.com · checked 26 July 2026
- 24 Vultr docs: Storage actions for IAM policies docs.vultr.com · checked 26 July 2026
- 25 Vultr docs: Object Storage subscription limits docs.vultr.com · checked 26 July 2026
- 26 Storj docs: Object Lock storj.dev · checked 26 July 2026
- 27 Oracle docs: Object Storage versioning docs.oracle.com · checked 26 July 2026
- 28 Tigris docs: Authentication and authorization www.tigrisdata.com · checked 26 July 2026
- 29 Filebase docs: S3 compatibility matrix filebase.com · checked 26 July 2026
- 30 Filebase docs: Buckets and objects filebase.com · checked 26 July 2026
- 31 Telnyx docs: Object Lock and retention developers.telnyx.com · checked 26 July 2026
- 32 AWS price list, Frankfurt (S3) pricing.us-east-1.amazonaws.com · checked 22 October 2026
- 33 Google Cloud Storage pricing cloud.google.com · checked 25 October 2026
- 34 AWS: Amazon S3 pricing aws.amazon.com · checked 26 July 2026
- 35 Amazon S3 docs: Restoring an archived object docs.aws.amazon.com · checked 26 July 2026