Find out whether your backups actually survive a ransomware event — or an audit

The problem

2:47 AM. The CIO of a Singapore-licensed insurer gets a page: the core policy database is being encrypted by ransomware. Six people crowd onto the incident bridge, staring at twelve screens. Then the hardest question of the night lands: “Do we fail over to DR right now? What’s the success probability? Who explains it to the board tomorrow if it doesn’t work?”

That has never been a question backup software could answer. It’s a judgement call. For thirty years, that call has lived in a senior engineer’s gut at 2 AM — untraceable, unauditable, and impossible to reproduce. Jumborca’s claim — and ours, as their regional partner — is that a judgement like that belongs in software.

The Jumborca product portfolio we resell

SupAI.ONE · Unified BaaS / DRaaS

One console, many workloads. M365 (Exchange, OneDrive, SharePoint, Teams), VMs (VMware, Hyper-V, KVM), endpoints, databases (SQL Server, Oracle, MySQL, PostgreSQL, MongoDB), NAS, K8s persistent volumes. Tri- cloud (AWS, Azure, GCP) with Singapore-region default for PDPA data residency. WORM + BYOK + zero-trust. Immutable snapshots an attacker with admin credentials cannot delete. Instant VM Power-On under 90 seconds, second-grade RPO. This is the offering most customers start with after the assessment.

SupInsight · The AI decision brain

What separates Jumborca from every other backup or DR vendor. Three modes:

• Predict — causal graph plus time-series anomaly detection judges whether today’s jitter is self-healing or deteriorating, and whether you should proactively fail over. Outputs probability and cost estimate.
• Explain — every decision leaves a “why”. Each decision carries a unique ID, input snapshot, model version, reasoning path and signed timestamp. Replayable, signed, deliverable to your board or MAS / BNM / OJK on demand. Not a black box.
• Learn — after each event your engineers feed RLHF signal back in. The model improves on your history. It only ever understands your site.

You can disable AI recommendations at any time and fall back to a traditional rule engine. No lock-in.

SupDRC · Active-active + cross-region DR

In-city active-active, cross-region DR, application-level consistency, failover by business group, graceful rollback. Oracle / DB2 / MySQL / PG / SAP HANA / VMware / K8s. Goal: RTO ≤ 10 minutes · RPO ≤ 10 seconds. Measured RTO 8 minutes on a deployed nationwide retail bank.

SupVault · Long-term compliance retention

Object storage plus WORM plus tiered retention plus access audit trail. Pre-wired templates for MAS, CBIRC, healthcare and energy regulators. Designed so the evidence chain comes out in under 1 hour when an auditor asks.

SupDrill · Rehearsal & audit automation

Runbook engine plus sandbox target environments plus auto-generated regulator reports. Takes the rehearsal cycle from yearly paper exercise to monthly real failover. Reporting effort: 5 days down to 2 hours.

How to start

Tier 1 · The 2-week Resilience Assessment (fixed fee)

Best for: customers who want a defensible posture quickly without committing to a product purchase yet.

What you walk away with after 2 weeks:

1. A sensitive-data inventory mapping where personal, financial and health-relevant data lives across every system we touch.
2. A scorecard against ~80 PDPA + ISO 27001 control objectives, with evidence.
3. A prioritized remediation plan sequenced to get you to a defensible posture inside 6 months.

Delivered to the documentation standard IMDA / EDG audits require. During your PSG or EDG application, TWO TWO will make every effort to make these assessment artifacts available as application materials.

Tier 2 · The 90-day Jumborca POC

Best for: customers ready to evaluate the full Resilience Intelligence platform under real conditions before signing.

• Weeks 1–3 · Discovery — current DR inventory, last 12 months of incidents, regulatory scope. Deliverable: gap diagnosis report.
• Weeks 4–9 · Pilot — deploy SupAI.ONE + SupInsight on 1–2 representative systems, weekly sandbox rehearsals, RLHF feedback. Deliverable: pilot runtime report.
• Weeks 10–13 · Validate — live failover, compliance review, SLA reconciliation, ROI model, rollout plan. Decision: continue, expand or terminate.

You can terminate at any day during the 90 days. No fee owed, no explanation required. Lock-in is something we and Jumborca both refuse to do — any DR purchase anchored by contract lock-in has already lost.

Contact sales · Start a 90-day POC