Part of the Enterprise Backup Ledger (edition 2026-10-03). How the scores work: methodology.
Snapshot
- Tier: Regional candidate
- Owner: Huawei; corporate-control detail not researched for this backup-software candidate.
- Licence model: Separately documented DataBackup software; exact software SKU/contract metrics and global sales eligibility unresolved.
- Products scored: OceanProtect DataBackup software 1.3 guide/1.6 security target; X/E appliance and open-eBackup excluded.
- Latest release: DataBackup 1.6.0 security-target version; latest GA/date not verified
- Next signal: No dated next milestone established in the accepted research.
- Archetype: Software eligibility unresolved
- Evidence grade: C. Overall grade uses all scored history/AI steps and lens criteria: 8 A, 0 B, 41 C of 49; the lowest grade covering more than 25% wins. Judgement itself does not demote a sourced fact; unresolved eligibility, baseline or contract estimates do.
Not ranked: Public evidence is insufficient to establish qualifying standalone commercial software release, workload eligibility and current matrices. Reference scores are excluded from rankings; observation year is not asserted as launch year.
Scope of the scores: Product capability cutoff 2026-10-01; scoring edition 2026-10-03. Combined portfolio scores do not imply one SKU or uniform feature parity. History is evidence-bounded; freezes and first-feature GA dates can be incomplete. AI services named in the AI section do not broaden the ten core domains.
Scorecard
| Dimension | Score | Direction |
|---|
| Capability today | 45.2 / 100 | higher is better |
| Momentum since end of 2023 | +7.8 points | higher is better |
| Credibility | 9.0 / 25 | higher is better |
| Commercial risk | 14.0 / 25 | lower is better |
| Technical lock-in | 14.5 / 25 | lower is better |
| Integrator fit | 7.5 / 20 | higher is better |
| AI leverage | 1.0 / 20 | higher is better |
| Ledger Index | 37.8 / 100 | balanced weights |
Capability by domain
Scores 0 to 5 against fixed anchors; total is weighted to 100.
| Domain (weight) | 2016 | 2019 | 2022 | Today |
|---|
| Virtual and physical servers (12) | n/a | n/a | n/a | 2.5 |
| Databases and applications (12) | n/a | n/a | n/a | 2.5 |
| Recovery (14) | n/a | n/a | n/a | 3 |
| Cyber resilience (14) | n/a | n/a | n/a | 1.5 |
| Storage efficiency and targets (10) | n/a | n/a | n/a | 3 |
| Long-term retention and tape (6) | n/a | n/a | n/a | 2 |
| Replication and DR (10) | n/a | n/a | n/a | 2.5 |
| Security and compliance (8) | n/a | n/a | n/a | 2 |
| New-platform support (VMware exit) (8) | n/a | n/a | n/a | 1 |
| Management at scale and automation (6) | n/a | n/a | n/a | 2 |
| Total / 100 | not released | not released | not released | 45.2 |
Year by year: 2023: 37.4 · 2024: 37.4 · 2025: 45.2 · 2026: 45.2
What moved the score
| Year | Domain | Change | Points | Trigger |
|---|
| 2025 | Cyber resilience | 1 → 1.5 | +1.4 | Observed by 2026-10-01: Software data sheetp 3 advertises AI ransomware and virus detection, WORM, AirGap. Algorithm, immutable administrator bypass, minimum retention, scan workloads and first software GA not specified. Data-sheet 99.99 percent accuracy differs from product-page 99.9 percent; neither independently verified. Marketing AI/WORM/AirGap without first released software version: maximum half-step over initial documented estimate. Evidence C. softwareSheet25; product |
| 2025 | Databases and applications | 1 → 2.5 | +3.6 | Observed by 2026-10-01: 2025 copyright software data sheetp 3 names Oracle/SQL/Db2/MariaDB/MySQL/HANA/Informix/PostgreSQL/MongoDB and distributed databases; full/incremental/differential/forever-incremental/log backup and system-specific PIT restore. No supported engine versions or per-engine consistency method; database-native eligibility cannot be inferred solely from list. Software-sheet claim, no per-engine consistency/certification matrix. Evidence C. softwareSheet25 |
| 2025 | New-platform support (VMware exit) | 0.5 → 1 | +0.8 | Observed by 2026-10-01: Software data sheetp 3 lists VMware/Hyper-V/RHV/FusionCompute/CNWare/Nutanix and OpenStack/HCScloud. No version/method or first-release clocks; generic list does not prove each hypervisor full agentless support. Generic software catalogue, not agentless supported-version proof; half-step only. Evidence C. softwareSheet25 |
| 2025 | Storage efficiency and targets | 2 → 3 | +2.0 | Observed by 2026-10-01: Software data sheetp 3: local/SAN/NAS/object/cloud targets, inline variable-length dedup/compression. Version-specific compatibility remains gated. Software sheet is distinct from appliance throughput claims. Software target/inline dedupe claim, not appliance throughput. Evidence C. softwareSheet25 |
Direction, 2023 to 2026
Each item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).
| Date | Item | Theme | Driver |
|---|
| 2023-12 | Huawei announces future open-eBackup open-source project alongside OceanProtect hardware launches. open-eBackup is excluded under user scope; announcement does not establish separate commercial DataBackup software GA or say all commercialsoftware licences became open-source. (clock: 2023-12-20) | D12 Packaging and licensing | P |
| 2025-04 | 1.6.0SPC2: Release-note publication; feature body entitlement gated. (clock: 2025-04-24 DOCUMENT publication) | D10 Scale and automation | C |
| 2025-05 | 1.6.0SPC3: Release-note publication; feature body entitlement gated. (clock: 2025-05-01 DOCUMENT publication) | D10 Scale and automation | C |
| 2025-05 | V200R001C01: Release-note publication; feature body entitlement gated. (clock: 2025-05-31 DOCUMENT publication) | D10 Scale and automation | C |
| 2025-08 | 1.6.0: Base release-note document publication; mapping published 2025-03-26. Different document clocks, not software GA. (clock: 2025-08-01 DOCUMENT publication) | D10 Scale and automation | C |
| 2025-11 | V200R001C02SPC002: Release-note publication; feature body entitlement gated. (clock: 2025-11-07 DOCUMENT publication) | D10 Scale and automation | C |
| 2026-01 | V200R001C02: Release-note/version-mapping publication; do not infer GA or order from document date. (clock: 2026-01-23 DOCUMENT publication) | D10 Scale and automation | C |
| 2026-01 | V200R001C10: Release-note publication; feature body entitlement gated. (clock: 2026-01-01 DOCUMENT publication) | D10 Scale and automation | C |
| 2026-04 | V200R001C32: Release-note/version-mapping publication; feature body entitlement gated. (clock: 2026-04-30 DOCUMENT publication) | D10 Scale and automation | C |
| 2026-05 | V200R001C10SPC100: Release-note/version-mapping publication; feature body entitlement gated. (clock: 2026-05-06 DOCUMENT publication) | D10 Scale and automation | C |
- Centre of gravity: Scale and automation (9), Packaging and licensing (1)
- Driver mix: Vision 0%, Customer need 90%, Market window 0%, Upstream 0%, Portfolio 10%
Credibility: 9.0 / 25
| Criterion | Score | Basis |
|---|
| Cadence | 1 | 12 recorded release rows, including maintenance and component overlaps; rows are not distinct GA counts. Regularity judged from the dated tables, not an asserted promised cadence. OceanProtect DataBackup 1.6.0 security target (not found): Public security-target document identifies software 1.6.0/V200R001C10; version identity is not GA-date proof Evidence A. st |
| Roadmap transparency | 1.5 | Public documentation access and versioned release evidence determine this score. Accepted roadmap finding: not found; dated release and vendor announcement pages used. No open-roadmap-tracker reference score is awarded. OceanProtect DataBackup 1.6.0 security target (not found): Public security-target document identifies software 1.6.0/V200R001C10; version identity is not GA-date proof Evidence A. st |
| Say-do | 2.5 | Recorded ledger: 0 items; 0 shipped, 0 partial, 0 slipped, 0 pending, 0 dropped. Mature dated prospective cohort: 0; 0 documented within 12 calendar months, 0 later than 12 months, 0 unresolved. Month-only/ambiguous clocks, same-day release notices and post-release blogs are excluded from that cohort. Pending is unverified, not failure; the ledger is a bounded sample. Evidence C for the rubric estimate: calibrated to the delivery record below, not a measured census percentage. See the vendor research section F. |
| Velocity | 1.5 | Substantive capabilities in the release tables determine velocity; maintenance-only rows do not become new features. V200R001C32 (2026-04-30 DOCUMENT publication): Release-note/version-mapping publication; feature body entitlement gated. Evidence A. releasecatalog |
| Lifecycle stability | 2.5 | Accepted lifecycle finding: not found. Grade C where current contract/EOS boundaries remain unresolved. 2023-12-20: Huawei announces future open-eBackup open-source project alongside OceanProtect hardware launches. open-eBackup is excluded under user scope; announcement does not establish separate commercial DataBackup software GA or say all commercialsoftware licences became open-source. Evidence C. opensource23 |
Say-do record, 2023 to 2026: Recorded ledger: 0 items; 0 shipped, 0 partial, 0 slipped, 0 pending, 0 dropped. Mature dated prospective cohort: 0; 0 documented within 12 calendar months, 0 later than 12 months, 0 unresolved. Month-only/ambiguous clocks, same-day release notices and post-release blogs are excluded from that cohort. Pending is unverified, not failure; the ledger is a bounded sample.
Commercial risk: 14.0 / 25 (lower is better)
| Criterion | Score | Basis |
|---|
| Price and licence volatility | 2.5 | 2023 to cutoff model/packaging observations are distinguished from historical introductions. Without a reconstructed price series this is a provisional estimate, not a measured price increase. 2023-12-20: Huawei announces future open-eBackup open-source project alongside OceanProtect hardware launches. open-eBackup is excluded under user scope; announcement does not establish separate commercial DataBackup software GA or say all commercialsoftware licences became open-source. Evidence C. opensource23 |
| Purchase constraints | 2.5 | Licence metrics, edition gates and purchase routes determine this estimate; undisclosed minimums are not assumed zero. Software scope: Separately documented DataBackup software; OceanProtect X/E appliance announcements excluded from software-release ledger Evidence A. product |
| Channel and access | 4 | Partner entry and public documentation access are both considered. Research documentation finding: st. OceanClub2026: Twelve elite-expert certificates awarded to Latam customer/partner experts; certification launch/requirements/download counts not established. Evidence A. latam26 |
| Owner stability | 2.5 | 2026-10-01 evidence boundary: Huawei; corporate-control detail not researched for this backup-software candidate. Ownership-risk judgement comes from the recorded corporate/financing events; no unrecorded transaction is assumed. Provisional rubric estimate; unknown terms are not evidence of either zero risk or the worst terms. Evidence C. |
| Cost of staying supported | 2.5 | Support/upgrade constraints, distinct from licence-expiry restoration: not found. 2023-12-20: Huawei announces future open-eBackup open-source project alongside OceanProtect hardware launches. open-eBackup is excluded under user scope; announcement does not establish separate commercial DataBackup software GA or say all commercialsoftware licences became open-source. Evidence C. opensource23 |
Security record of the product itself: No in-scope match located in the accepted security-record.md manual product-name filter of the CISA 2026-09-30 catalogue; no deduction. This is not an exhaustive advisory audit or a claim of no exploitation. Arcserve CVE-2015-4068 was added to KEV in 2022, outside the adjustment window. Adjacent array/infrastructure/hosting-plugin CVEs are excluded. Security record: CISA Known Exploited Vulnerabilities catalogue and vendor advisories.
Technical lock-in: 14.5 / 25 (lower is better)
| Criterion | Score | Basis |
|---|
| Formats | 3 | 2026-10-01 evidence boundary: Independent backup-format specification/readability is not established in the accepted research. Provisional format-dependency estimate, not proof that only a running licensed instance can read it. Provisional rubric estimate; unknown terms are not evidence of either zero risk or the worst terms. Evidence C. |
| Export path | 2.5 | 2026-10-01 evidence boundary: Independent data extraction and post-licence restoration terms are incomplete. Provisional export estimate, not proof of no export or licence-required restore. Provisional rubric estimate; unknown terms are not evidence of either zero risk or the worst terms. Evidence C. |
| Stack coupling | 3 | The documented component/management stack is considered; cross-workload or cross-hypervisor recovery is not inferred from an API. Software/control plane: Software security target specifies TOE components, roles and evaluated configuration; not portability or all-deployment certification Evidence C. st |
| Hardware / cloud coupling | 3 | Deployment/service dependencies determine this score; missing offline/hardware terms are a provisional estimate. Software/control plane: Software security target specifies TOE components, roles and evaluated configuration; not portability or all-deployment certification Evidence C. st |
| Skills and tooling coupling | 3 | Named training and product-specific administration imply some skills coupling; no unsourced scarcity/headcount claim. OceanClub2026: Twelve elite-expert certificates awarded to Latam customer/partner experts; certification launch/requirements/download counts not established. Evidence A. latam26 |
Integrator fit: 7.5 / 20
| Criterion | Score | Basis |
|---|
| Partner programme openness | 2 | Published partner routes and entry/tier qualifications earn credit; undisclosed obligations limit the score. OceanClub2026: Twelve elite-expert certificates awarded to Latam customer/partner experts; certification launch/requirements/download counts not established. Evidence A. latam26 |
| Multi-tenancy and self-service | 2 | Documented tenant/provider isolation and self-service earn credit; reporting or multi-site visibility alone does not prove billing/tenant self-service. Observed by 2026-10-01: Software data sheetp 3 advertises unified GUI/wizard cluster management, AI assistant/intelligent scheduling, alarms/SNMP/email and PDF/Excel reports. Management plane marketed as software; assistant read/recommend/act permissions and exact GA not documented. Evidence C. softwareSheet25 |
| API and infrastructure-as-code | 1.5 | Documented APIs and official IaC earn credit. Community examples and publisher-owned repositories do not automatically imply vendor support. Observed by 2026-10-01: Software data sheetp 3 advertises unified GUI/wizard cluster management, AI assistant/intelligent scheduling, alarms/SNMP/email and PDF/Excel reports. Management plane marketed as software; assistant read/recommend/act permissions and exact GA not documented. Evidence C. softwareSheet25 |
| Skills and certification | 2 | Named certification and hands-on curricula earn credit; first-launch or current credential gaps are retained. OceanClub2026: Twelve elite-expert certificates awarded to Latam customer/partner experts; certification launch/requirements/download counts not established. Evidence A. latam26 |
AI leverage: 1.0 / 20
| Strand | Today | Latest step |
|---|
| AI for protection / protecting AI | 0.5 | 2025: 2026-10-01 observation; vendor marketing; GA unverified: Product page mentions AI/emerging workloads; vector/model consistency, restore granularity and GA date not found. AI protection claim without verified software GA: half-step only. Evidence C. product |
| AI platform stack | 0 | none |
| AI-assisted operations | 0.5 | 2025: 2026-10-01 observation; vendor marketing; GA unverified: Product page mentions AI/emerging workloads; vector/model consistency, restore granularity and GA date not found. Software assistant claim without documented GA/tool scope: half-step only. Evidence C. product |
| Agent openness | 0 | none |
AI say-do sample: 0 recorded announcement rows; 0 GA/shipped matches, 0 preview/early/limited at announcement, 0 partial, 0 pending, 0 slipped, 0 dropped. Preview-at-announcement overlaps outcome counts. These are promise-row counts, not unique announcements or counts of released AI features; omissions/overlaps in the AI research ledger are preserved. "Shipped" may be a vendor availability assertion rather than an independently verified first-GA day.
Reading
Huawei documents backup software alongside a larger appliance portfolio. The software guide establishes VM recovery paths, while current claims lack complete version and availability evidence. The resulting reference scores remain outside rankings because eligibility and delivery cannot be established with confidence.
Open questions and evidence caveats
- Unchanged annual values carry the last scored release; they do not certify a frozen compatibility matrix or exact first-feature GA. Some checkpoint-derived jumps may lag the true first shipment.
- Unverified AI strands receive zero credited evidence; this is a conservative estimate rather than a vendor-wide absence claim. Preview/limited capabilities add at most half a point beyond the preceding established score.
- Say-do counts are a bounded research sample. Same-day/release-note announcements and post-release blogs are not promises delivered instantly. Missing outcome dates do not prove non-delivery.
- Commercial/exit terms not reconstructed use explicit provisional midpoint estimates; executed regional contracts may differ.
- virtual: 2016 baseline is provisional; no frozen checkpoint fact.
- apps: 2016 baseline is provisional; no frozen checkpoint fact.
- recovery: 2016 baseline is provisional; no frozen checkpoint fact.
- cyber: 2016 baseline is provisional; no frozen checkpoint fact.
- storage: 2016 baseline is provisional; no frozen checkpoint fact.
- retention: 2016 baseline is provisional; no frozen checkpoint fact.
- dr: 2016 baseline is provisional; no frozen checkpoint fact.
- security: 2016 baseline is provisional; no frozen checkpoint fact.
- platforms: 2016 baseline is provisional; no frozen checkpoint fact.
- scale: 2016 baseline is provisional; no frozen checkpoint fact.
- 2016 is the scoring axis origin, not a release claim; 2016 to 2022 zero credited evidence is unknown coverage, not proved absence. 2023 is the first software-guide observation, not asserted launch. Datasheet2025 copyright is not GA. AI accuracy 99.99% differs from webpage 99.9%; neither independently verified. open-eBackup is excluded as open source.
- Review 2026-10-03: history starts at 2023, the first year with public evidence, instead of zero scores from 2016.
Related reading
