Cloud-based, workload, and disaster recovery (DR) orchestration service

Scroll to Section

Confidently automate failover and failback with DRaaS with VMware Cloud on AWS or between on-premises sites.


  • Failproof DR with continuous compliance checks
  • One-click failover and failback between data centers or to DRaaS with VMware Cloud on AWS
  • Instant RTO and RPO for DR
  • Orchestrates disaster and ransomware recovery

Customer Success with ControlShift

“We must comply with long-term retention regulations and regular disaster recovery (DR) audits. With DVX, we enjoy the 10x performance increase, zero storage management, and 6x faster RTO that Automatrix provides. We’re going to use ControlShift to automate DR between our data centers, with continuous compliance and automatic audit reports, to make DR simple and fast.”

– Daryl Dressler, Solutions Architect, Intuition LLC

ControlShift Delivers Industry-Leading DR Orchestration

Failproof DR

ControlShift automatically checks your DR plan for health and compliance every 30 minutes, so you can be confident your plan is going to work when you need it. All data and backups are validated multiple times each day. Data is encrypted from host memory to the cloud, so you are 100% secure. ControlShift provides comprehensive resource mapping and sequencing for DR plans, including mapping for sites, protection groups, datastores, VMware vCenters, and IP addresses.

One-Click Failover and Failback

SaaS automates every step of your DR, so you don’t have to manage multiple products for DR orchestration, backup, and primary storage. No hardware or software to install, configure, integrate, diagnose, or maintain at multiple sites. Datrium orchestrates everything, so you can execute your DR plan with a single click. Flexible enough to support many different types of topologies between protected sites, backup sites, and failover sites.

Instant RTO for DR

VMs are restarted directly from millions of searchable point-in-time backups stored at the DR site for instant Recovery Time Objective (RTO). Native VM-level snapshots ensure a Recovery Point Objective (RPO) of as little as 5 minutes without any adverse impact on performance or capacity.

Recover from Disaster or Ransomware

Easily recover with recent snapshots or backups from months or years ago. This recovery point depth is critical for ransomware attacks, which often only become apparent months after the initial infection event.

Isolated DR Testing

Isolated DR test environments avoid any effects on production workloads or on actual failovers that might be necessary during a test. Specify separate test mappings for data stores, folders, compute resources, IP addresses, and any other resources appropriate to test a DR plan.

How It Works

ControlShift Running on Datrium DRaaS with VMware Cloud on AWS

DR Orchestration for Site-to-Site Mobility


A disaggregated HCI system with independent scaling of performance and capacity.

Cloud Backup

A cloud backup service that is included with DRaaS and can be purchased in conjunction with Datrium DVX. Cloud Backup creates regularly scheduled backups and stores them in S3 in a native compressed and deduplicated form.


A DR orchestration service that executes DR plans for on-premises to cloud and on-premises to on-premises recovery.

Production Site

A protected VMware workload that replicates backups to DRaaS with VMware Cloud on AWS or an on-premises DR Site. Data in Cloud Backup can optionally be used in DRaaS with VMware Cloud on AWS.

DR Site

A cloud or on-premises site used for recovery purposes. Serves as a repository or receiver of backups and can be used for instant failover of workloads from the Production Site.

ControlShift Basic Topologies

ControlShift supports a variety of basic topologies that can be combined to satisfy the most demanding and complex enterprise data protection needs.

DVX (protected) to Cloud Backup (backup) to DVX (failover)

This is an example of a three-site topology using Cloud Backup as a backup site  instead of an on-premises DVX.

DVX (protected) to Cloud Backup to DVX (backup)

A cost-effective cloud backup and archiving solution that uses a single cloud backup site. It can be used in cases where the on-premises hardware remains operational (e.g. disasters due to user errors or ransomware attacks). It can be also used for physical disasters with a new site replacing the old protected site.

DVX (protected) to DVX (failover)

In a simple two-site topology, a single DVX System serves as both a backup and failover site. The protected site sends backups to the failover site. ControlShift orchestrates instant failover to a backup/failover site with no additional data transfer at recovery time.

DVX (protected) to DVX (backup) to DVX (failover)

The protected site sends backups to both the failover site and a backup site. This topology is useful for extra protection, for longer archiving, or as a method of recovering from ransomware attacks that require “going back in time.”

What’s Happening Inside ControlShift

ControlShift orchestrates disaster and cybercrime recovery across DVXs and from the cloud. It makes recoveries instant, failproof, cost-effective, and easy.

Cloud DVX

Cloud DVX is the enabling technology in Cloud Backup. It uses S3 as a repository of backups stored in a native-compressed and deduplicated form. On-premises systems, such as DVX, send native forever-incremental backups to Cloud Backup. Global Deduplication ensures that data is transferred only when needed.


Cloud Backup uses S3 as a repository of backups in a Datrium-native, forever-incremental compressed and deduplicated form. Cloud Backup instances run a copy of the Datrium filesystem designed for efficient handling of backups on cost-optimized spinning disk media such as S3.


ControlShift is a DR orchestration service that executes DR plans and provisions and monitors SDDCs in VMware Cloud on AWS. DR plans and states are stored in a highly-available plan database replicated across multiple availability zones. Built-in self-healing ensures that, in the event of public cloud unavailability, all affected Datrium services automatically migrate to a healthy availability zone without any data loss.

Datrium VPN

Datrium VPN is automatically configured to provide secure communications channels for all on-premises and cloud components without requiring any third-party VPN hardware or software.

Compliance Checks and Reporting

Automatic Compliance Checks ensure DR plan integrity is in a steady state providing maximum assurance of a successful failover. ControlShift offers a variety of reports to satisfy DR readiness and audit requirements.

SaaS Delivery and Support

With autonomous deployment, configuration, maintenance, upgrades, and healing from component failures, you can focus on managing your data protection requirements. No manual on-premises software installation is required. Datrium monitors and supports all components of the system, including on-premises infrastructure and AWS.

Lambda Based Self-Healing

Serverless Lambda functions are used to automate the initial deployment of various service components and to subsequently monitor and autonomously heal all deployed services.

To learn more, download the architecture diagram.


Download PDF

Frequently Asked Questions


What is ControlShift?

ControlShift is a disaster recovery and mobility orchestration service offered by Datrium.

What can I do with ControlShift?

You can use ControlShift to design, test, and execute your disaster recovery plans. ControlShift supports flexible topologies for recovery using both on-premises and cloud backup sites as well as failover to on-premises and cloud target DR sites (when used as a part of Datrium DRaaS).

How is ControlShift different from existing disaster recovery orchestration software?

ControlShift is not a packaged software product. ControlShift is a SaaS offering – there is nothing to install or manage on premises. ControlShift infrastructure is entirely located in the public cloud and managed and supported by Datrium, so you can focus on designing and testing your DR plans instead of running third-party software.


What are the options for acquiring ControlShift, and what is the delivery mechanism?

ControlShift is a cloud service that can be acquired in two different ways:

  1. SaaS: ControlShift service executes in Datrium AWS infrastructure, and the customer gets a single bill from Datrium. ControlShift is also available to run in customer-managed AWS infrastructure, allowing you to benefit from your AWS EDP.
  2. DRaaS: ControlShift is packaged into Datrium DRaaS. This version of ControlShift is extended to support failover to a public target DR site. The customer gets a single bill from Datrium.
  3. Bring-Your-Own-Cloud (BYOC): ControlShift is deployed in a customer-provided AWS account. The customer is responsible for paying cloud infrastructure bills to the public cloud provider and ControlShift fees to Datrium.

What are the subscription terms for ControlShift?

You purchase ControlShift for the number of VMs or virtual desktops you want to protect and the number of years you want to protect them.

Do I need an AWS account to use ControlShift?

No, you do not need an AWS account to use ControlShift. It is a fully managed service from Datrium, so you just access it through your vCenter plugin without any cloud credentials.


Do I call Datrium for ControlShift support?

Datrium supports all aspects of the ControlShift service, so you get everything you need from a single support call.

What type of support is offered with ControlShift?

Datrium supports the VMs included in the service for the term of the subscription.

Do I call Datrium to execute my ControlShift plans?

No, you execute your ControlShift plans yourself whenever you want to test or move workloads between sites and to the public cloud.

See How We Do It

We can help your organization get modern DR in an easy-to-use SaaS solution that eliminates the cost and complexity of traditional DR solutions. We provide cloud-native, on-demand DR with instant RTO for all your VMware workloads. You can be confident that your data is secure in the cloud or on premises and protected against ransomware attacks.