A backup is a theory until the restore path is visible.
Data Convoy gives cold-storage restores the same operational weight as archives: preview, permission, rehydration, integrity checks, failure reporting, and retry.
Know the retrieval scope first
Restore dry runs enumerate the intended work and report counts and bytes without issuing Glacier restore requests or incurring retrieval activity.
Verify the return trip
After rehydration, workers use server-side copy and compare checksums when the source provides them, falling back to object size when needed.
Recover interrupted work
Workers renew job leases through heartbeats. Expired leases are returned to the queue, and bounded retry tools prevent a vanished worker from leaving a job permanently stuck in running state.
Your buckets. Your workers. Your control.