diff --git a/sunbeam-python/sunbeam/storage/backends/sandstone/__init__.py b/sunbeam-python/sunbeam/storage/backends/sandstone/__init__.py
new file mode 100644
index 000000000..fcfca5589
--- /dev/null
+++ b/sunbeam-python/sunbeam/storage/backends/sandstone/__init__.py
@@ -0,0 +1,4 @@
+# SPDX-FileCopyrightText: 2026 - Canonical Ltd
+# SPDX-License-Identifier: Apache-2.0
+
+"""Sandstone backend for Sunbeam storage."""
diff --git a/sunbeam-python/sunbeam/storage/backends/sandstone/backend.py b/sunbeam-python/sunbeam/storage/backends/sandstone/backend.py
new file mode 100644
index 000000000..6386c551b
--- /dev/null
+++ b/sunbeam-python/sunbeam/storage/backends/sandstone/backend.py
@@ -0,0 +1,92 @@
+# SPDX-FileCopyrightText: 2026 - Canonical Ltd
+# SPDX-License-Identifier: Apache-2.0
+
+"""Sandstone iSCSI backend implementation using base step classes."""
+
+import logging
+from enum import StrEnum
+from typing import Annotated
+
+from pydantic import Field
+from rich.console import Console
+
+from sunbeam.core.manifest import StorageBackendConfig
+from sunbeam.storage.base import StorageBackendBase
+
+LOG = logging.getLogger(__name__)
+console = Console()
+
+
+class Protocol(StrEnum):
+    """Enumeration of valid protocol types."""
+
+    ISCSI = "iscsi"
+
+
+class SandstoneConfig(StorageBackendConfig):
+    """Configuration model for Sandstone iSCSI backend.
+
+    This model includes ALL configuration options for the backend.
+    Additional configuration can be managed dynamically through the charm.
+    """
+
+    # Mandatory connection parameters
+    san_ip: Annotated[
+        str, Field(description="Storage array management IP address or hostname.")
+    ]
+    # Optional connection configuration
+    protocol: Annotated[
+        Protocol | None,
+        Field(description="Protocol selector: iscsi."),
+    ] = None
+
+    # Optional backend configuration
+    default_sandstone_target_ips: Annotated[
+        str | None,
+        Field(description="Sandstone default target IPs."),
+    ] = None
+    sandstone_pool: Annotated[
+        str | None,
+        Field(description="Sandstone storage pool resource name."),
+    ] = None
+    initiator_assign_sandstone_target_ip: Annotated[
+        str | None,
+        Field(description="Support assigning a target IP to an initiator."),
+    ] = None
+
+
+class SandstoneBackend(StorageBackendBase):
+    """Sandstone iSCSI backend implementation."""
+
+    backend_type = "sandstone"
+    display_name = "Sds iSCSI"
+    generally_available = True
+
+    @property
+    def charm_name(self) -> str:
+        """Return the charm application name."""
+        return "cinder-volume-sandstone"
+
+    @property
+    def charm_channel(self) -> str:
+        """Return the default charm channel."""
+        return "latest/edge"
+
+    @property
+    def charm_revision(self) -> str | None:
+        """Return a pinned charm revision, if any."""
+        return None
+
+    @property
+    def charm_base(self) -> str:
+        """Return the target base for this charm."""
+        return "ubuntu@24.04"
+
+    @property
+    def supports_ha(self) -> bool:
+        """Whether this backend supports HA deployments."""
+        return False
+
+    def config_type(self) -> type[StorageBackendConfig]:
+        """Return the configuration model type for this backend."""
+        return SandstoneConfig
diff --git a/sunbeam-python/tests/unit/sunbeam/storage/backends/conftest.py b/sunbeam-python/tests/unit/sunbeam/storage/backends/conftest.py
index 80d3d8ef5..df2c05cdb 100644
--- a/sunbeam-python/tests/unit/sunbeam/storage/backends/conftest.py
+++ b/sunbeam-python/tests/unit/sunbeam/storage/backends/conftest.py
@@ -9,6 +9,7 @@
 from sunbeam.storage.backends.dellsc.backend import DellSCBackend
 from sunbeam.storage.backends.hitachi.backend import HitachiBackend
 from sunbeam.storage.backends.purestorage.backend import PureStorageBackend
+from sunbeam.storage.backends.sandstone.backend import SandstoneBackend
 
 
 @pytest.fixture
@@ -29,19 +30,28 @@ def dellsc_backend():
     return DellSCBackend()
 
 
+@pytest.fixture
+def sandstone_backend():
+    """Provide a Sandstone backend instance."""
+    return SandstoneBackend()
+
+
 @pytest.fixture
 def dellpowerstore_backend():
     """Provide a Dell PowerStore backend instance."""
     return DellPowerstoreBackend()
 
 
-@pytest.fixture(params=["hitachi", "purestorage", "dellsc", "dellpowerstore"])
+@pytest.fixture(
+    params=["hitachi", "purestorage", "dellsc", "sandstone", "dellpowerstore"]
+)
 def any_backend(request):
     """Parametrized fixture that provides each backend type."""
     backends = {
         "hitachi": HitachiBackend(),
         "purestorage": PureStorageBackend(),
         "dellsc": DellSCBackend(),
+        "sandstone": SandstoneBackend(),
         "dellpowerstore": DellPowerstoreBackend(),
     }
     return backends[request.param]
diff --git a/sunbeam-python/tests/unit/sunbeam/storage/backends/test_common.py b/sunbeam-python/tests/unit/sunbeam/storage/backends/test_common.py
index def51a0e8..b94923640 100644
--- a/sunbeam-python/tests/unit/sunbeam/storage/backends/test_common.py
+++ b/sunbeam-python/tests/unit/sunbeam/storage/backends/test_common.py
@@ -157,13 +157,18 @@ def backend(self, any_backend):
 
 
 def test_all_backends_have_unique_types(
-    hitachi_backend, purestorage_backend, dellsc_backend, dellpowerstore_backend
+    hitachi_backend,
+    purestorage_backend,
+    dellsc_backend,
+    sandstone_backend,
+    dellpowerstore_backend,
 ):
     """Test that all backends have unique type identifiers."""
     backends = [
         hitachi_backend,
         purestorage_backend,
         dellsc_backend,
+        sandstone_backend,
         dellpowerstore_backend,
     ]
     types = [b.backend_type for b in backends]
@@ -173,13 +178,18 @@ def test_all_backends_have_unique_types(
 
 
 def test_all_backends_have_unique_charm_names(
-    hitachi_backend, purestorage_backend, dellsc_backend, dellpowerstore_backend
+    hitachi_backend,
+    purestorage_backend,
+    dellsc_backend,
+    sandstone_backend,
+    dellpowerstore_backend,
 ):
     """Test that all backends have unique charm names."""
     backends = [
         hitachi_backend,
         purestorage_backend,
         dellsc_backend,
+        sandstone_backend,
         dellpowerstore_backend,
     ]
     charm_names = [b.charm_name for b in backends]
@@ -196,6 +206,7 @@ def test_all_backends_have_unique_charm_names(
         ("hitachi", "hitachi"),
         ("purestorage", "purestorage"),
         ("dellsc", "dellsc"),
+        ("sandstone", "sandstone"),
         ("dellpowerstore", "dellpowerstore"),
     ],
 )
@@ -211,6 +222,7 @@ def test_backend_types_match_expected(any_backend, backend_type, expected_type):
         ("hitachi", "cinder-volume-hitachi"),
         ("purestorage", "cinder-volume-purestorage"),
         ("dellsc", "cinder-volume-dellsc"),
+        ("sandstone", "cinder-volume-sandstone"),
         ("dellpowerstore", "cinder-volume-dellpowerstore"),
     ],
 )
diff --git a/sunbeam-python/tests/unit/sunbeam/storage/backends/test_sandstone.py b/sunbeam-python/tests/unit/sunbeam/storage/backends/test_sandstone.py
new file mode 100644
index 000000000..47cc739ad
--- /dev/null
+++ b/sunbeam-python/tests/unit/sunbeam/storage/backends/test_sandstone.py
@@ -0,0 +1,58 @@
+# SPDX-FileCopyrightText: 2026 - Canonical Ltd
+# SPDX-License-Identifier: Apache-2.0
+
+"""Tests for Sandstone backend."""
+
+import pytest
+from pydantic import ValidationError
+
+from tests.unit.sunbeam.storage.backends.test_common import BaseBackendTests
+
+
+class TestSandstoneBackend(BaseBackendTests):
+    """Tests for Sandstone backend."""
+
+    @pytest.fixture
+    def backend(self, sandstone_backend):
+        """Provide Sandstone backend instance."""
+        return sandstone_backend
+
+    def test_backend_type_is_sandstone(self, backend):
+        """Test that backend type is 'sandstone'."""
+        assert backend.backend_type == "sandstone"
+
+    def test_charm_name_is_sandstone_charm(self, backend):
+        """Test that charm name is cinder-volume-sandstone."""
+        assert backend.charm_name == "cinder-volume-sandstone"
+
+    def test_config_has_required_fields(self, backend):
+        """Test that Sandstone config has required fields."""
+        fields = backend.config_type().model_fields
+        for field in ("san_ip", "protocol"):
+            assert field in fields, f"Required field {field} not found in config"
+
+
+class TestSandstoneConfigValidation:
+    """Test Sandstone config validation behavior."""
+
+    def test_protocol_rejects_invalid_value(self, sandstone_backend):
+        """Test that protocol rejects values other than iscsi."""
+        config_class = sandstone_backend.config_type()
+        with pytest.raises(ValidationError):
+            config_class.model_validate(
+                {
+                    "san-ip": "192.168.1.1",
+                    "protocol": "fc",
+                }
+            )
+
+    def test_protocol_accepts_iscsi(self, sandstone_backend):
+        """Test that protocol accepts iscsi."""
+        config_class = sandstone_backend.config_type()
+        config = config_class.model_validate(
+            {
+                "san-ip": "192.168.1.1",
+                "protocol": "iscsi",
+            }
+        )
+        assert config.protocol == "iscsi"