BACKGROUND IMAGE: iSTOCK/GETTY IMAGES
Cloud-to-cloud backup, or C2C backup, is the practice of copying data stored on one cloud backup service -- commonly referred to as software as a service (SaaS) -- to another cloud.
Third-party cloud backup has gained popularity with businesses and home users because it takes the management and maintenance of hardware out of the equation for the customer. Initial capital expenditures (Capex) for additional hardware are not required, and overall initial costs are lower. Backups can be run automatically and without manual intervention.
Although the cloud has generally proven to be a more reliable data backup method than local efforts, any system can fail. Backing up to multiple locations is therefore advised for added data security. It makes practical sense to use a low-effort, reliable product for backup and to protect data from failure of that service by adding redundancy at a second location. If data created in SaaS applications, such as Salesforce or Microsoft Office 365, is lost or deleted due to human error, the company is held responsible. Because SaaS vendors often charge large fees to restore that data, many businesses are turning to cloud-to-cloud backup.
C2C backup provides users with a convenient way to store data in multiple locations. However, it also increases the possibility of sensitive information being compromised as compared to offline hard backups. Due to proximity, local backups can also provide faster recovery than pulling data out of the cloud.
As SaaS applications have increased in popularity, so has cloud-to-cloud backup. The technology provides enhanced data protection beyond the basics offered by SaaS applications. However, customers should not assume their data is protected by a SaaS provider against any type of data loss or error, as backups are often created only for the provider's purposes. For example, a SaaS application may not have native protection against user error. It may be more expensive and time-consuming to try to recover data from a SaaS provider than through a cloud-to-cloud backup service.
Cloud-to-cloud backup vendors usually back up data created in SaaS apps to another cloud -- Amazon Web Services (AWS) is commonly used -- or to a private cloud maintained by the C2C backup vendor. Customers can restore data from the target cloud if it is no longer available through the SaaS app.
Backing up data in the cloud often falls to the information technology (IT) department. The ability to recover data in its last known good state is important for business continuity (BC). It can be easy to make a mistake in a SaaS application, such as Salesforce, so cloud-to-cloud backup is a critical availability element for companies that do business in the cloud.
C2C backup offers a number of advantages over a SaaS vendor's native data protection:
- It is more comprehensive, as it protects the user against many possible cases of data loss.
- A cloud-to-cloud backup provider's sole focus is on backup data, so backups are quicker and easier, as are recoveries.
- Data backed up to another cloud is accessible from almost anywhere in the world.
- C2C backups are generally immune to ransomware attacks on an organization because they are not on the office network.
Cloud services are scalable, so backup data sets can grow easily in the storage space. However, organizations need to be careful about the volume of data, as costs will escalate and management will become more difficult. Most management of the backup data falls to the service provider, though this element could be seen as a negative for those customers that wish to have total control over their backups.
Because the cloud-to-cloud backup market is still relatively new, only a handful of vendors provide this service. It can be tough to know how well a vendor will work out, since each one has only been around for a few years. Data backup for an application like Salesforce can be complex, and an organization needs to make sure it knows exactly what a cloud-to-cloud backup provider is backing up. And if an organization uses more than one application, it may need a variety of products to back up all of its SaaS data.
In addition, bandwidth and latency are always concerns with the cloud. If many organizations use the same connection, speed and performance may be worse than normal.
One way for an organization to gain confidence in its C2C backup strategy is through testing. The same methods used to test backup and recovery for on-premises data should be applied to cloud-to-cloud backups.
Cloud-to-cloud backup vs. traditional backup
Some of the biggest benefits of traditional backup -- most notably with disk backups -- over C2C backup are speed and ease of recovery. If an organization uses tape or disk backup, it uses that media on its own to continue business operations, rather than going through a cloud-to-cloud backup service provider for recovery. Other organizations may prefer to leave that backup management to another vendor. Traditional backup is especially useful if a large amount of data needs to be recovered, as that volume of recovery takes a long time to cross a network.
Tape backup involves copying data from primary storage to a tape cartridge. Because tape media capacity has grown so much in recent years -- hitting 30 TB in Linear Tape-Open 8 (LTO-8) -- tape is a good backup choice for organizations with massive data sets. Tapes are also comparatively cheaper to own and operate than disk and, often, the cloud. The restoration process can be slower because tapes do not provide random access.
The biggest benefit of disk backup is access speed. Disks provide random access. Disk backups often run throughout the day, while tape backup is less continuous. The risk of human error in disk-based backup is smaller, as it is generally self-contained. In addition, disk is not as portable or as durable as tape. Disk is also expensive, often more so than tape or cloud.
There is more flexibility in restoring from cloud-to-cloud backups, as an organization can restore to different machines, such as laptops or mobile devices. There is also flexibility in that cloud-to-cloud backup does not require additional hardware. The cloud and tape both provide ample protection from ransomware and other cyberattacks; the cloud is off-site backup, but tape backups are even more protected because they are offline. In addition, the lifespan of a C2C backup could outlast that of disk or tape backups, as long as the vendor stays in business.
Choosing a service provider
Important business data stored off-site should have the same level of protection as on-premises data, and customers should treat the selection of a cloud-to-cloud backup vendor just like that of a more traditional backup vendor. Some common SaaS applications include Microsoft Office 365, Salesforce and G Suite (formerly Google Apps). Customers may need a variety of products to protect cloud data, as a cloud-to-cloud backup product will often focus on a specific application.
When choosing a cloud-to-cloud backup service provider, important factors to consider are the level of support for a given SaaS application, compliance with regulations and backup frequency. Application subscription independence is an often overlooked element. For example, if an organization cancels its subscription to Salesforce, data recovery could still be possible through a provider.
According to storage expert Chris Evans, when picking a cloud-to-cloud backup service provider, questions should include:
- What are the customer's recovery time objectives (RTOs) and recovery point objectives (RPOs) for SaaS applications?
- Does the backup and restore process meet the customer's RTOs and RPOs?
- How easy is it to test the backups for recovery?
- Are backup exceptions necessary for certain users?
Data created in the cloud comes with security risks. Because a third party is handling the data, it should be encrypted at the original cloud site, when it travels between clouds and at rest in the backup location.
Cloud-to-cloud backup vendors
Up until late 2014, cloud-to-cloud backup was generally viewed as a niche market. At that time, EMC acquired Spanning Cloud Apps, and Datto bought Backupify. The market has continued to grow since that time, in both the number of vendors that provide C2C backup and in the breadth of SaaS protection offered.
Datto Backupify protects data stored in applications like Salesforce, G Suite and Microsoft Office 365. Backup, recovery and BC vendor Datto was acquired by private equity firm Vista Equity Partners and merged with IT management provider Autotask in 2017. The vendor did not provide C2C backup at the time that it picked up Backupify, a company founded in 2007.
Spanning Cloud Apps, founded in 2010, has three products: Backup for G Suite, Backup for Office 365 and Backup for Salesforce. After buying EMC in 2016, Dell spun Spanning Cloud Apps out to private equity firm Insight Venture Partners in 2017.
While Backupify and Spanning Cloud Apps offer backup software specifically designed to protect data created in the cloud, Asigra was the first to build the functionality into an all-purpose backup application. Asigra Cloud Backup software first added the function in 2012. Asigra Cloud Backup protects Salesforce, G Suite and Office 365 data.
Cloud-to-cloud backup startup OwnBackup, founded in 2012, provides backup for Salesforce, ServiceNow and Slack. The vendor planned to significantly expand following a $15.5 million funding round in 2018.
Barracuda Cloud-to-Cloud Backup backs up Office 365 data to the Barracuda Cloud. That platform includes Exchange Online, OneDrive for Business and SharePoint Online. The vendor also protects physical workloads, virtual machines (VMs) and cloud data with its Barracuda Backup and separately provides email protection and network and application security.
Data protection vendor Druva offers backup for Office 365, G Suite, Box and Salesforce, with its inSync software. In addition, the vendor said it will support native cloud-to-cloud backup in AWS in 2018, with plans to extend it to Microsoft Azure and other platforms.
In 2017, Acronis added C2C backup for Microsoft Office 365 to its Acronis Backup product. Veeam Software also provides backup for Office 365, to another cloud or on premises.
In 2014, eFolder acquired cloud-to-cloud backup provider Cloudfinder. The vendor merged with cloud data protection provider Axcient in 2017.