Software-as-a-service (SaaS) cloud providers almost all spell out in their terms and conditions that protecting cloud data is the clientu2019s responsibility.u00a0 Despite this, most clients assume that they donu2019t need to concern themselves with data backup.u00a0 This is not a safe assumption.u00a0 Cloud data needs protecting just like your local data.
SaaS providers take responsibility and have measures in place in the event of a disaster or infrastructure failure u2013 so they donu2019t lose your data. If you lose data through no fault of your provider, they may not be able to retrieve that data from backups.u00a0 Even if they can, you will likely encounter delays, restrictions or even significant fees.u00a0 Salesforce, for example, charges a minimum of $10,000 to recover customer data, and it can take several weeks.u00a0
Itu2019s your responsibility to plan for other risks, which could include:
- Accidental Deletion u2013 This can be a problem if the deletion is not noticed before the data is deleted from the useru2019s recycle bin or trashcan. Also, if data is accidentally overwritten with incorrect information, this usually canu2019t easily be reversed, if at all.u00a0
- Departing Employees u2013 When an employee leaves your organization, deactivating their user account in your SaaS application usually means their stored data is deleted. If you wish to keep this data, you need to have a good way of exporting or transferring that data somewhere.u00a0
- Cybercrime u2013 So far, cybercriminals have been targeting on-premises systems, but rest assured they will focus more and more on cloud-based data, especially as the number of companies storing critical data in the cloud increases.
- Malicious Insiders u2013 These could be disgruntled employees, a vendor, or a contractor who has access to your network and has intent to do harm. How much harm they can do will depend on the data access and authorizations they have been granted.
- Rogue Applications u2013 There are a growing number of add-on applications for SaaS solutions. What happens if one of these applications misbehaves, for instance if duplicate records are supposed to be consolidated but instead unique records are accidentally deleted or corrupted?u00a0
- SaaS Provideru2019s Prolonged Outage u2013 Could you function without your cloud data for a day, a week or a month in the event of a serious outage on their part?
4 Steps you should take now:
- Find out what your SaaS provideru2019s backup and restore policies are. Perhaps thereu2019s an additional backup service option.u00a0
- While youu2019re at it, you should also review their disaster recovery capabilities. Watch out for terms of service regarding u201cforce majeureu201d, which allows the provider to free themselves of responsibility in the case of u201can act of Godu201d.u00a0
- If you are not satisfied with the data protection provided by your SaaS vendor, work with a cloud-to-cloud backup provider. These providers have automated systems to back up copies of your cloud data from one cloud to another.u00a0 Finding and restoring data from backups is usually simplified with search and granular recovery capabilities.u00a0
- Another option is to manually export your cloud data on a scheduled basis and store it elsewhere. Many SaaS providers offer data export tools.u00a0 Note however, that with this method, it is virtually impossible to restore just a portion of the exported data.u00a0 You would need to restore all the data if the need arose.u00a0u00a0
If youu2019re storing data with Microsoft Office 365 or Google Apps, and want to learn more about BSC Solutions Groupu2019s cloud-to-cloud backup solution, please give us a call.u00a0
