RivoShield is a Windows control product. It protects administrator-selected locations at the filesystem layer. It does not store recoverable versions and it is not a backup system.
Normal protected mode
Normal protection is designed for live work. Users can open, view, create, edit, save, rename, move and copy files. Delete requests inside the protected location are blocked. A cross-volume move can behave like a copy-out: the destination copy may be created while deletion of the protected source is denied, so both locations should be checked.
Archive mode
Archive mode is for completed content. Users may open, view and copy files out, but create, edit, overwrite, rename, move and delete operations are blocked. To resume changes, an authenticated RivoShield administrator must Unarchive the folder. Delete protection remains enabled after Unarchive.
Administrator responsibility
Adding or removing locations, changing protection, Archive/Unarchive and controlled audit clearing are administrative actions. Even a Windows administrator should Unarchive through RivoShield before modifying archived content.
What Archive mode is not
Archive mode is not encryption, backup or immutable off-device retention. It enforces a view-only operating state on the selected Windows location. Independent backups remain essential.