diff --git a/services/backup/src/BackupServiceImpl.cpp b/services/backup/src/BackupServiceImpl.cpp
index c697f91b7..56f5178cb 100644
--- a/services/backup/src/BackupServiceImpl.cpp
+++ b/services/backup/src/BackupServiceImpl.cpp
@@ -1,51 +1,95 @@
 #include "BackupServiceImpl.h"
 
 #include "CreateNewBackupReactor.h"
+#include "DatabaseManager.h"
 #include "PullBackupReactor.h"
 #include "RecoverBackupKeyReactor.h"
 #include "SendLogReactor.h"
 
 #include <aws/core/Aws.h>
 
 namespace comm {
 namespace network {
 
 BackupServiceImpl::BackupServiceImpl() {
   Aws::InitAPI({});
 }
 
 BackupServiceImpl::~BackupServiceImpl() {
   Aws::ShutdownAPI({});
 }
 
 grpc::ServerBidiReactor<
     backup::CreateNewBackupRequest,
     backup::CreateNewBackupResponse> *
 BackupServiceImpl::CreateNewBackup(grpc::CallbackServerContext *context) {
   return new reactor::CreateNewBackupReactor();
 }
 
 grpc::ServerReadReactor<backup::SendLogRequest> *BackupServiceImpl::SendLog(
     grpc::CallbackServerContext *context,
     backup::SendLogResponse *response) {
   return new reactor::SendLogReactor(response);
 }
 
 grpc::ServerBidiReactor<
     backup::RecoverBackupKeyRequest,
     backup::RecoverBackupKeyResponse> *
 BackupServiceImpl::RecoverBackupKey(grpc::CallbackServerContext *context) {
   return new reactor::RecoverBackupKeyReactor();
 }
 
 grpc::ServerWriteReactor<backup::PullBackupResponse> *
 BackupServiceImpl::PullBackup(
     grpc::CallbackServerContext *context,
     const backup::PullBackupRequest *request) {
   reactor::PullBackupReactor *reactor = new reactor::PullBackupReactor(request);
   reactor->start();
   return reactor;
 }
 
+grpc::ServerUnaryReactor *BackupServiceImpl::AddAttachments(
+    grpc::CallbackServerContext *context,
+    const backup::AddAttachmentsRequest *request,
+    google::protobuf::Empty *response) {
+  grpc::Status status = grpc::Status::OK;
+  std::string userID = request->userid();
+  std::string backupID = request->backupid();
+  std::string logID = request->logid();
+  const std::string holders = request->holders();
+  try {
+    if (userID.empty()) {
+      throw std::runtime_error("user id required but not provided");
+    }
+    if (backupID.empty()) {
+      throw std::runtime_error("backup id required but not provided");
+    }
+    if (holders.empty()) {
+      throw std::runtime_error("holders required but not provided");
+    }
+
+    if (logID.empty()) {
+      // add these attachments to backup
+      std::shared_ptr<database::BackupItem> backupItem =
+          database::DatabaseManager::getInstance().findBackupItem(
+              userID, backupID);
+      backupItem->addAttachmentHolders(holders);
+      database::DatabaseManager::getInstance().putBackupItem(*backupItem);
+    } else {
+      // add these attachments to log
+      std::shared_ptr<database::LogItem> logItem =
+          database::DatabaseManager::getInstance().findLogItem(backupID, logID);
+      logItem->addAttachmentHolders(holders);
+      database::DatabaseManager::getInstance().putLogItem(*logItem);
+    }
+  } catch (std::runtime_error &e) {
+    std::cout << "error: " << e.what() << std::endl;
+    status = grpc::Status(grpc::StatusCode::INTERNAL, e.what());
+  }
+  auto *reactor = context->DefaultReactor();
+  reactor->Finish(status);
+  return reactor;
+}
+
 } // namespace network
 } // namespace comm
diff --git a/services/backup/src/BackupServiceImpl.h b/services/backup/src/BackupServiceImpl.h
index ca1c6fe07..4e00fead6 100644
--- a/services/backup/src/BackupServiceImpl.h
+++ b/services/backup/src/BackupServiceImpl.h
@@ -1,37 +1,42 @@
 #pragma once
 
 #include "../_generated/backup.grpc.pb.h"
 #include "../_generated/backup.pb.h"
 
 #include <grpcpp/grpcpp.h>
 
 namespace comm {
 namespace network {
 
 class BackupServiceImpl final : public backup::BackupService::CallbackService {
 
 public:
   BackupServiceImpl();
   virtual ~BackupServiceImpl();
 
   grpc::ServerBidiReactor<
       backup::CreateNewBackupRequest,
       backup::CreateNewBackupResponse> *
   CreateNewBackup(grpc::CallbackServerContext *context) override;
 
   grpc::ServerReadReactor<backup::SendLogRequest> *SendLog(
       grpc::CallbackServerContext *context,
       backup::SendLogResponse *response) override;
 
   grpc::ServerBidiReactor<
       backup::RecoverBackupKeyRequest,
       backup::RecoverBackupKeyResponse> *
   RecoverBackupKey(grpc::CallbackServerContext *context) override;
 
   grpc::ServerWriteReactor<backup::PullBackupResponse> *PullBackup(
       grpc::CallbackServerContext *context,
       const backup::PullBackupRequest *request) override;
+
+  grpc::ServerUnaryReactor *AddAttachments(
+      grpc::CallbackServerContext *context,
+      const backup::AddAttachmentsRequest *request,
+      google::protobuf::Empty *response) override;
 };
 
 } // namespace network
 } // namespace comm