Backups use immutable storage, which means backed-up files can’t be modified or deleted outside the secure backup interface. Additional protections include multi-factor authentication, role-based access controls, encryption, and malware scanning before data is restored.