Enterprise SaaS Backup is built on enterprise backup infrastructure that is independently certified and audited. Here is how your data is protected and how to request our security documentation.
Certifications and audits
- ISO/IEC 27001: the backup platform is certified to the international standard for information security management.
- SOC 2 Type II: platform controls for security, availability, confidentiality and privacy are independently audited. The report is available on request under NDA.
- Data centers: hosted in ISO 27001-certified data centers with complementary attestations such as SOC 2, ISAE 3402 and PCI DSS.
- HIPAA and GDPR: safeguards that support your compliance. A Data Processing Agreement and Business Associate Agreement are available on request.
How your data is protected
- Immutable backups: backup data cannot be altered or deleted by ransomware or a compromised admin account.
- Vendor independence: backups are stored in a dedicated cloud, separate from Microsoft, Google and Salesforce.
- Encryption: data is encrypted in transit and at rest.
- Data residency: choose the region where your backups are stored, including the United States.
- Access control: role-based access and audit logs for every restore and administrative action.
Shared responsibility
SaaS providers keep their service running; protecting and recovering your data is your responsibility. Independent backup is recommended by NIST and required by many cyber-insurance policies.
Request documentation
For the SOC 2 report, DPA, BAA or a completed security questionnaire, email [email protected] or use our contact form.