Technologies for providing block-level continuous data protection can operate without additional external devices. I/O operations to a storage volume may be logged to a sequential journal volume. The logging can occur in parallel to the I/O operation thereby having little, or no, impact on the performance of the storage system. Previous data need not be backed up; instead only new I/O operations may be recorded in the journal or log. Snapshot events may also be recorded to the logging journal. When a volume is to be recovered, a snapshot can be mounted and I/O operations after the snapshot creation, but prior to the recovery point, can be played back onto the snapshot. Operators may be provided with a flexible mechanism for reviewing and recovering data after a data loss. Using snapshots and I/O journals, a volume can be rolled back to a desired point nearly instantaneously.