The 3-2-1 Rule — The Global Standard for Data Protection and Proof of Existence

* This essay is a reflection on the design philosophy of data preservation.

1. What is the 3-2-1 Rule?

The "3-2-1 rule" is the most fundamental principle in data backup.

Keep at least 3 copies of your data, on at least 2 different types of media, with at least 1 stored in a physically separate location.

That's it. Simple, yet following this principle alone dramatically reduces the risk of data loss.

Why "3"?

With only one copy, a single disk failure means losing everything. Two copies feel safer, but both can be destroyed by the same disaster. Three copies exponentially reduce the probability of total loss.

In probabilistic terms, adding independent points of failure improves overall reliability multiplicatively.

Why "2 types"?

Identical media share identical weaknesses. Three hard drives from the same batch can fail from the same manufacturing defect or firmware bug. Three cloud services from the same provider can go down simultaneously from a single outage.

Combining different media types — say, hard drives and tape, or cloud and optical disc — eliminates "common mode failures." This is the engineering principle of diversity redundancy.

Why "1 offsite"?

If all backups sit in the same building, a single fire, earthquake, or flood wipes out everything. Storing at least one copy at a physically distant location distributes geographic risk.

After the collapse of the World Trade Center on September 11, 2001, many companies learned this lesson the hard way. Those that kept both servers and backups in the towers lost literally everything.

2. Origins and Evolution

The popularization of the 3-2-1 rule is often traced to photographer Peter Krogh's 2005 book, The DAM Book: Digital Asset Management for Photographers. He codified this principle as a strategy for preserving digital photographs.

"There are two kinds of people: those who have lost data, and those who will." — Peter Krogh

However, the essence of this principle — redundancy, diversity, geographic distribution — existed long before Krogh's book.

Redundancy since antiquity

Egyptian pharaohs inscribed important records in multiple temples. The Rosetta Stone was discovered precisely because the same decree had been placed in several locations.

Medieval monks hand-copied manuscripts and distributed them across multiple monasteries. Before the printing press, this was humanity's "backup strategy."

The "3-2-1" formulation is modern, but the underlying idea — preserve what matters through multiple methods, in multiple places — is as old as civilization itself.

Modern extension: 3-2-1-1-0

In recent years, the 3-2-1 rule has been extended to "3-2-1-1-0":

• 3 copies
• 2 different media types
• 1 offsite
• 1 air-gapped or immutable copy
• 0 errors (regular restore verification)

As ransomware threats escalate, the importance of maintaining a backup that cannot be accessed online has become widely recognized. Data laser-inscribed on quartz glass is, by definition, an immutable, air-gapped backup.

3. TokiStorage and the 3-2-1 Rule

TokiStorage's three-layer distributed storage naturally implements the 3-2-1 rule. It wasn't deliberately modeled on this principle — rather, the relentless pursuit of "reliably preserving records" converged on the same architecture.

Physical layer — Quartz glass / UV laminate

QR codes are laser-inscribed onto quartz glass. No electricity needed, no servers needed, no internet needed. A thousand years from now, simply holding a smartphone over it will access the data.

This simultaneously satisfies the "air-gap" requirement of 3-2-1-1-0. Because it is not connected to any network, tampering through ransomware or cyberattack is physically impossible.

National layer — National Diet Library (confirmed)

QR codes are embedded in PDFs formatted as periodic newsletters and deposited with Japan's National Diet Library. This leverages the legal deposit system mandated by the National Diet Library Act — preserved as long as the nation endures. In February 2026, the NDL officially confirmed our materials for collection and initiated periodic automated harvesting.

Here, the "medium" is not a physical disk but the legal system itself. Entrusting data to the social infrastructure of law is a preservation strategy that transcends hardware lifespans.

Private layer — GitHub

Data is stored as repositories on the world's largest code hosting platform. Git's distributed version control replicates data across servers worldwide.

GitHub, operated by Microsoft, is the world's largest code hosting platform with over 100 million developers. The economic rationality of a private corporation and the public spirit of the open-source community together sustain the survival of data.

4. Why "Different Media Types" Matter

The heart of the 3-2-1 rule lies in "2 different media types." Three copies on the same kind of medium can all fall together.

The homogeneity trap

In 2021, a fire destroyed OVHcloud's data center in France. Despite having backups distributed across multiple servers, some customers lost everything because all copies resided in the same building. They had "3 copies" but neglected "2 media types" and "1 offsite."

Amazon's cloud service (AWS) offers multiple availability zones, but all run on Amazon's software stack. A software-level bug can affect every zone simultaneously.

TokiStorage's diversity

TokiStorage's three layers have fundamentally different failure modes:

• Physical layer threats — physical destruction (dropping, fire, theft)
• National layer threats — changes in legislation, dissolution of the state
• Private layer threats — corporate bankruptcy, service termination

The event of quartz glass shattering, the event of the National Diet Library Act being repealed, and the event of GitHub shutting down are independent of each other. This is the essence of "diversity redundancy." Unless all three failures occur simultaneously, the data survives.

5. The Philosophy of Backup — Why Do We Preserve?

The 3-2-1 rule is a technical principle, but behind it lies a universal question:

Why do people try to preserve data?

For businesses, it's about continuity and legal compliance. But when an individual backs up their smartphone photos, the motivation is far more fundamental.

The fragility of memory

Human memory is astonishingly unstable. Cognitive psychology research shows that we don't "recall" past events — we "reconstruct" them each time. Memories shift, distort, and sometimes vanish entirely.

Photos and videos function as an "external backup" for this fragile memory. A loved one's voice, a child's smile, a landscape that no longer exists — losing these is tantamount to losing the memories themselves.

Backup as proof of existence

The essence of data backup is "being able to restore when something goes wrong." But look deeper, and it's also about "not erasing the evidence that someone was here."

Businesses back up data so their enterprise continues to exist. Individuals back up photos so the proof that a moment existed endures.

TokiStorage explicitly defines this backup motivation as "proof of existence" and extends it to a 1,000-year timescale. It connects the technical framework of the 3-2-1 rule to the existential human desire to persist.

6. The Aesthetics of Redundancy

In engineering, "redundant" is sometimes pejorative. Code redundancy should be eliminated. But in system design, redundancy is the very source of reliability.

Redundancy in nature

Biology is a master of redundancy. Humans have two kidneys. DNA repair mechanisms are layered many times over. Plants scatter thousands of seeds, designed so that just one needs to sprout.

Evolution doesn't penalize the "extra." On the contrary, species lacking redundancy are extinguished by the first unexpected event.

The Shikinen Sengu of Ise Grand Shrine

Japan offers another elegant example of redundancy. The Shikinen Sengu at Ise Grand Shrine rebuilds the shrine every 20 years. The moment when the old shrine and the new stand side by side could be called "architectural backup."

Deliberately creating "one more" to pass skills and memory to the next generation — this concept is essentially the same as the 3-2-1 rule's "third copy."

"Extra" saves the world

What the 3-2-1 rule teaches is that "just enough" isn't enough. One is precarious. Two is insufficient. Only with three can you breathe easy.

TokiStorage's three-layer distributed storage applies this "aesthetics of the extra" to proof of existence. The physical layer alone might suffice. Adding the national layer adds confidence. But it's the third — the private layer — that finally lets us say, "even if any one disappears, it's fine."

Conclusion — Principles Transcend Time

The 3-2-1 rule is not tied to any specific technology. Whether hard drives, tape, cloud, or quartz glass, the principle remains unchanged.

Because it is not a principle about technology. It is a principle about not losing.

Three copies. Two media types. One offsite.

Follow this principle, and your data survives fire, bankruptcy, and regime change.

TokiStorage implements this principle not on an 80-year scale, but a 1,000-year one. Physical law, national institution, and economic rationality — three independent forces continue to guard your proof of existence.