SaaS Protect

We supply select SaaS capabilities to help organisations safeguard their critical assets without the complexity of traditional security infrastructure. These capabilities address critical widespread market requirements, offering tools that are easy to implement, straightforward to use, and simple to license.

Why organisations need backup for SaaS?

For decades, organisations - commercial, public sector, charities - have been backing up data for critical on-premise systems. This allows data recovery from a period of time that is important for organisations to stay operational - typically years of backup - and this has remained an accepted IT budget item. These backup facilities are regularly tested to ensure they work across different data loss scenarios for best practice and compliance reasons.

Even today, the National Cyber Security Centre continues to promote the "3-2-1" backup rule, which has been around for 20 years. This was first popularized by photographer Peter Krogh in his book "The DAM Book: Digital Asset Management for Photographers" where he outlined the concept of multiple backups stored in different locations; making it a well-established standard in data backup practice

For the same reasons as critical on-premise systems, key SaaS tools also need a thorough backup facility. Widely used SaaS like M365, Salesforce, and Google Workspace are all provided under a service agreement that makes users responsible for providing their own backup. There's no backup functionality to support business continuity and disaster recovery plans in the case of ransomware. Even for daily operational data loss scenarios, there is little to help organisations get their data back, for example when there are:

Accidental or insider malicious deletion of important files, emails or documents.
SaaS outages or failures removing access to data.
eDiscovery requirements to access previous versions of documents or email conversations.

A good example of limited recovery from data loss is the Microsoft recycle bin, which provides a level of recovery for up to 90 days on some data items and zero recovery - once it’s gone it’s gone - on others. Given that various leading industry studies show that it takes around 200 days to even discover a breach, there is a critical imperative to have a secure backup by design facility for SaaS that is core to continuing operations.

BentleyWhitaker also note that having backup for critical SaaS tooling is a condition of cyber insurance providers to underwrite policies.

Why BentleyWhitaker selected Keepit for SaaS backup?

Security by design

Most of our clients are UK headquartered small to medium sized organisations with stretched IT departments that want to benefit from the vision of how SaaS should work: Easy to implement, secure, no operational effort, meets requirements, and a simple affordable license model. Keepit delivers that and more.

Keepit is positioned as a market leader by Forrester and has over 6,000 customers worldwide. It’s a European company, based out of Copenhagen, that recognises the importance of data sovereignty. Instead of deployment in public cloud, it provides UK regional private data-centres that guarantee backup never leaves the UK.

The Keepit backup is offsite and air-gapped away from any production workloads. This means:

Any public cloud outage does not affect access to the backup data.
Threat actors normally hunting to compromise backup deployed in the same place as production systems - on-premise, Azure or AWS - are thwarted.

In addition to the usual tick-box checks around data encryption in transit, at rest and other cyber security concerns, Keepit is based on a blockchain-like architecture. This means immutability is underpinned at a level that no other vendor can provide.

Identity security

Backup for EntraID. Alex Weinert - VP Identity Security, Microsoft states there are over 50 million password attacks on identities in EntraID every day. Threat actor’s favourite attack vector is to compromise identities and, as such, Microsoft state identity is the number one asset to protect in any organisation.

Keepit backs up more EntraID objects than any other vendor in the market and this important fact intensifies, when considering two things:

Hybrid is not enough. There are objects that exist in EntraID that do not exist in AD
The Microsoft recycle bin provides 14 to 30 day backup on some objects. For other objects, when it’s gone it’s gone - hard deleted - eg accidental deletion of Conditional Access and InTune policies results in having to develop them again from scratch.

Keepit also supports least-privilege to the backup by supporting MFA access to the platform and Role Based Access Controls within the platform.

Keepit SaaS backup coverage

Organisations do not want lots of different backup vendors for a variety of critical SaaS capabilities. Today, Keepit already provides backup for 8 different SaaS workloads.

The Keepit architecture also means it is easy to add new SaaS workloads. This is because Keepit owns all the technology in the stack and, as a cloud-native capability, it scales horizontally and vertically easily. This IP-owned design has two other advantages over other backup vendors:

Keepit avoids adding mounting numbers of potential attack vectors associated with sub-processors or integrations with acquired technology.
There are no clunky inefficiencies caused by backup capabilities developed as software for on-premise deployment then make 'cloud ready' to commercially offer a SaaS license model.

Keepit backs up the following SaaS capabilities:

Microsoft. M365, Dynamics 365, EntraID, PowerBI, Azure DevOps.
Others. Salesforce, Google Workspace, Zendesk

License model

Price per user. For each SaaS workload there is an annual price per user and this includes unlimited storage.
No egress or ingress costs because Keepit uses regional private data-centres (no public cloud).
Keepit provides 4 copies of backup. Two copies in each of two UK data-centres.
No charge for backing up inactive users, eg departed users or occasional contractors data.
Zero set-up costs or ongoing operational costs

Easy to use

All SaaS workloads can be managed via a single console view and it is very intuitive to use whether reviewing the audit, checking for anomalies, executing a granular search for a version of a document through to bulk data recovery via a restore wizard.

Please get in touch with jonathan@bentleywhitaker.com to arrange a demo. Worst case - we will always leave you with valuable food for thought.

Google Workspace

Microsoft 365

Power BI

Microsoft Entra ID

Why choose us?

With over 25 years of experience in the industry, we understand the challenges of securing data and ensuring business continuity. Our approach focuses on:

Reliable, Easy-to-Use Solutions

We develop expert level knowledge of the few SaaS capabilities that we supply. Our advise and guidance is always professional and never bias by vendor promotions.

Strong Partnerships

We work with trusted vendors, who prioritise customer support and long-term value.

Going the Extra Mile

We will learn our clients priorities and always seek to add-value in discussions. Where appropriate our Search & Select team will always help with IT resource hiring too.