Rubrik Cloud Vault (RCV) is a cloud storage service for backup data hosted in a Rubrik-managed instance of Azure, AWS or GCP.[1] It is an add-on to the Rubrik Service, priced per back-end terabyte. Several other Rubrik cloud products either store their data in RCV or are licensed on related capacity metrics: the Universal Cloud License (UCL), NAS Cloud Direct and Rubrik Managed Cloud Protection.[1] This article also covers Rubrik’s AI products, which use a token metric.
Editions
| Product | What it covers | Metric | Hosting |
|---|---|---|---|
| Rubrik Cloud Vault | Storage for backup data | BETB by storage tier and redundancy | Rubrik-managed Azure, AWS or GCP |
| Universal Cloud License | Cloud Native Protection and Cloud Cluster-ES | FETB | Customer-hosted, or Rubrik-hosted on RCV |
| NAS Cloud Direct | File data on NAS devices over SMB and NFS | FETB | Customer-hosted, or Rubrik-hosted on the RCV archive tier |
| Managed Cloud Protection | Cloud workloads, with no protection infrastructure in the customer’s tenant | FETB and BETB together | Rubrik-hosted |
| Rubrik Agent Cloud | Monitoring and remediation of AI agent actions | Platform fee plus annual token allotment | Set in the Reseller quote |
Source: Licensing Guide.[1] Managed Cloud Protection is offered in Foundation, Business and Enterprise Editions. To use certain security features with UCL, NAS Cloud Direct or Managed Cloud Protection, the customer must buy the bundle or edition that contains them.[1] Catalog: Rubrik Cloud Vault; Universal Cloud License; NAS Cloud Direct; Rubrik Managed Cloud Protection; Rubrik Agent Cloud.
Metrics
RCV. Licences are priced per back-end terabyte. The price depends on the storage tier (recovery, backup or archive) and the redundancy option (single zone, multi zone or multi region).[1] Not every combination is available on every cloud. For example, the Licensing Guide’s table shows the archive tier as single zone on Azure and multi zone on AWS and GCP.[1]
UCL and NAS Cloud Direct. Both are offered on an FETB pricing model, where FETB is the initial volume of primary data before data reduction.[1]
Managed Cloud Protection. Licensed on a combined front-end capacity (FETB) and back-end storage capacity (BETB) basis. For this product, FETB is the latest volume of primary data and excludes relics, ghost objects, NoSLA objects and objects marked “do not protect”.[1] Catalog: Managed Cloud Protection needs both FETB and BETB licences.
Rubrik Agent Cloud. RAC is licensed as tiered bundles of a platform fee and an annual token allotment for a standard 12-month term. Tokens represent the volume of input (prompt) and output (completion) text from the customer’s AI applications and tools monitored by RAC. Use is permitted up to the tier limits in the Reseller quote.[1] Rubrik Agentic Coding Resilience adds a monthly repository entitlement for Rubrik DevOps Protection to the same structure.[1] Catalog: Rubrik Agent Cloud token allotment; Rubrik Agent Cloud is licensed as tiered token bundles.
Counting / floors
Capacity Entitlement. RCV usage is measured in BETB for the data stored in RCV and compared continuously with the capacity bought in the Order (the “Capacity Entitlement”), separately for each RCV SKU configuration. Customer Data above the Capacity Entitlement will not be stored on RCV.[1] UCL and NAS Cloud Direct usage is also compared continuously with its entitlement.[1] For RCV, running out of entitlement is therefore an operational risk, not only a compliance one: backups beyond the entitlement are not stored. Catalog: Data above the RCV Capacity Entitlement is not stored.
Both limits for Managed Cloud Protection. The Licensing Guide’s example: a customer with 100 FETB of cloud workloads and 400 BETB of backup storage is out of compliance if it exceeds either. Both licences are required at first purchase. Later expansions can be bought separately.[1]
Tiers are fixed. RCV customers pay upfront for a Subscription Period of at least one year, commit to specific storage tiers and redundancy options, and may not move capacity between tiers or redundancies.[1] Tiers and quantities can be upgraded at any time, co-termed with the original Subscription Period.[1] Catalog: Rubrik Cloud Vault requires a Rubrik Security Cloud subscription.
Minimum storage periods. Data in the RCV backup tier (Azure, AWS and GCP) must stay for at least 30 consecutive days. Data in the Azure and AWS archive tier must stay for at least 180 consecutive days.[1] Data protected with Rubrik-hosted UCL, which is stored in an RCV backup tier, and data in Managed Cloud Protection storage must stay for at least 30 days.[1] Catalog: RCV backup and archive tiers have minimum storage periods.
Trials. Free Trials of Managed Cloud Protection are limited to 10 FETB of Managed Cloud Protection, 25 FETB of Managed Cloud Unstructured Protection and 50 BETB of backup storage.[1]
Virtualization & partitioning
The metrics are storage and data volumes, so the number of cloud instances or hosts does not change the licence count. What matters is where data sits. Rubrik-hosted UCL and NAS Cloud Direct keep backup data in the same Azure region as the source data. NAS Cloud Direct data goes to an RCV archive tier and must be in a region where RCV is available.[1]
Cloud / BYOL
Prerequisites. RCV requires a Rubrik Security Cloud subscription. Rubrik-hosted UCL and Rubrik-hosted NAS Cloud Direct each require the purchase of RCV.[1] Catalog: Rubrik Cloud Vault requires a Rubrik Security Cloud subscription.
Migration from on-premises. One TB of Rubrik Security Cloud gives one TB on only one of Rubrik Security Cloud, Edge or Universal Cloud License Foundation Edition. When a customer migrates one on-premises TB to the cloud, that BETB converts to one FETB of UCL Foundation Edition. More capacity or functionality must be bought.[1] The Enterprise Edition data sheet says that cloud protection included in edition bundles covers only workloads migrating from on-premises, and that UCL is an add-on for workloads already in the cloud.[2]
Egress and fair use. RCV pricing includes data egress and recovery fees. In the backup and archive tiers this is subject to a Fair Use Policy. Standard operational recoveries, such as after accidental deletion, are included. The standard subscription “does not cover systemic, automated, bulk, large-scale, repetitive recoveries, nor those that surpass typical operational patterns or objectives”, which may incur additional fees.[1] The recovery tier is not subject to these limits. In any tier, the Fair Use Policy does not apply when the customer is responding to a cybersecurity incident or a force majeure or disaster recovery event.[1] Catalog: RCV egress is included subject to a Fair Use Policy.
No secondary copies. Creating a secondary backup copy is not permitted with any Rubrik-hosted subscription, including frequent copies exported outside the Rubrik Service.[1]
Warranty coverage. Data in the backup tier of RCV, configured with immutability and the Instant Archive setting, and data in a Rubrik managed cloud storage environment can be Protected Data under the Ransomware Recovery Warranty.[3]
Programs
AI Solutions. Rubrik AI (formerly “Ruby”) is an optional feature of Rubrik Security Cloud for threat investigations. It is not enabled by default, and an administrator must opt in.[1] AI Solutions are excluded from the Service Level Agreement and from Rubrik’s indemnity obligations, and are provided “as is”.[1]
RSC-G. Rubrik Security Cloud - Government is a Rubrik-hosted environment for government customers and their suppliers. Its terms restrict use to members of a defined Community, require U.S. Persons for administrative access and exclude data located outside the continental United States. The Service Level Agreement and support response time targets do not apply to RSC-G.[1]
Out of scope
- RCV and UCL prices, which Rubrik does not publish.
- The cloud providers’ own terms for the underlying Azure, AWS and GCP services.
- Customer-hosted deployments of UCL and NAS Cloud Direct beyond the metric.
- RSC-G compliance controls and the Customer Responsibility Matrix.