BackupVision360 · Early access
Encrypted backups, restores nobody can rush
Protect Microsoft 365, vSphere VMs and AWS, Azure and Google Cloud resources in storage you own or in our locked managed storage. Data is encrypted before it is written, and every restore and every destructive change waits for a second person.
- Encrypted
- before it is written, per-organization keys
- 4-eyes
- every restore and destructive change
- 10 items
- free, any mix, on your own storage
What BackupVision360 covers
Microsoft 365, vSphere and endpoints
- Microsoft 365 mailboxes, OneDrive and SharePoint sites, copied off the tenant with incremental runs
- Shared mailboxes and sites included up to one per protected person
- Restore back into the original mailbox, OneDrive or site, or as files: download or export from any restore point
- Laptops, desktops and servers through the ITOps360 agent: encrypted on the device and written straight to your S3 or Google Cloud bucket, or to our storage
- VMware vSphere: connect vCenter, see every VM, host and cluster, and protect VMs by name, host or cluster with changed-block incrementals
Cloud snapshots
- Provider-native snapshots of AWS, Azure and Google Cloud resources: instances with their disks, volumes, databases and file systems
- Tag policies: protect everything tagged, say, backup=gold, with excludes that always win
- Hourly to monthly schedules with GFS retention (daily, weekly, monthly, yearly)
- Cross-region copies and copies into an isolated vault account, with snapshot locks where the cloud offers them
- Disaster-recovery drills: restore into an isolated network on a schedule, measure recovery time, tear down and keep the evidence
- Data never passes through BackupVision360: the cloud's own APIs snapshot, copy and restore in your accounts
Security by design
- Encrypted before it is written, under keys unique to your organization. With your own KMS key (AWS KMS, Azure Key Vault, Google Cloud KMS; Business and up) your key unlocks it: you see every use and can revoke it at any time
- Four-eyes restores: a different person approves, both with a fresh authenticator check, and requests expire after 24 hours
- Destructive changes (deleting restore points, shortening retention, removing a copy or a lock) need a second person, and retention cuts wait 24 hours
- Hash-chained audit trail; API tokens and Vision Agent can never approve anything
Managed storage, if you want it
- Bring your own storage (Azure Blob, Amazon S3 or S3-compatible, Google Cloud Storage, a NAS or file share) at no storage charge, or use ours
- Managed storage on our Azure: a dedicated, locked, encrypted location per customer in the same or nearest region
- Immutable for the retention period, three availability zones plus a locked second copy in the same jurisdiction
- Checked weekly and monthly with a test restore, no restore or egress fees, and you can copy everything to your own bucket at any time
Your other backup tools
- Monitor the backup tools you already run: Veeam Backup & Replication, N-able Cove and Datto, free in every plan and never counted as an item
- Failed and missed jobs flagged per organization, with your own staleness and alert thresholds
- Backup health shown in ITOps360 next to each device, with alerts and tickets
Insight and service providers
- Home, coverage and compliance reports, usage against your plan, and the audit trail
- Backup success, protected items and storage on your own dashboards, and in Vision Agent's Today brief
- Customers console for service providers: provider staff can request restores, the customer approves
How it works
Connect
Connect Microsoft 365 with admin consent proven by a Global or Privileged Role Administrator sign-in, add vCenter, cloud accounts or Veeam, and choose your storage or ours.
Protect
Policies pick what to back up: people and sites, VMs by host or cluster, or cloud resources by tag. Anything left unprotected is listed, never skipped silently.
Lock and copy
Restore points are encrypted, kept on a schedule with GFS retention, copied to another region or a vault account and locked where the storage allows it.
Restore with approval
Someone requests a restore with a fresh authenticator check, a different person approves it, and both sides of it land in the audit trail.
Works with
- Microsoft 365 (Exchange Online, OneDrive, SharePoint)
- VMware vCenter
- Amazon Web Services
- Microsoft Azure
- Google Cloud
- Veeam Backup & Replication
- N-able Cove
- Datto
- Azure Blob Storage
- Amazon S3 and S3-compatible storage
- Google Cloud Storage
- ITOps360
Deployment
- Hosted for you in our cloud, with optional managed storage on our Azure
- Private deployment on your own Docker host (Enterprise)
- PostgreSQL with row-level security per organization
- One CloudVision360 sign-in from My Apps
On the roadmap
- Live vSphere VM backup through an on-premises mover (VDDK)
- Disaster-recovery drills for DynamoDB, EFS, Azure SQL, Cloud SQL and vSphere VMs
- Restoring straight from a cloud vault account, and file-level restore from cloud snapshots
Check where you stand
Free, about five minutes, scored in your browser. Nothing is sent unless you ask for the report.
ITOps Maturity Assessment
How proactive, automated and measured your IT operations are. 9 questions, about 5 minutes.
Cloud Security Assessment
How well you see and control risk across your cloud accounts. 8 questions, about 5 minutes.
Questions people ask
Can we use BackupVision360 today?
Yes, in early access: Microsoft 365 backup and restore, laptops and servers through the ITOps360 agent, AWS, Azure and Google Cloud snapshots with DR drills, monitoring of the backup tools you already run, managed or your own storage, and four-eyes restores. The newest parts are being verified with early customers, and live vSphere backup is on the roadmap. Book a live demo to see where it stands.
Can you read our backups?
With your own KMS key (Business and up), no: your key unlocks the data, every use shows in your KMS logs, and revoking it makes the backups unreadable to us. With the default key, data is still encrypted before it is written, under keys unique to your organization, but our systems hold the key that wraps them. Our staff can't restore your data without your organization's approval, and every restore, approval and key change is in your audit trail.
What does it cost?
Free for up to 10 protected items of any mix, backed up to your own storage (10 GB of our managed storage is coming soon). Paid plans are priced per protected item, managed storage is $29 per TB per month with no restore or egress fees, and your own storage has no storage charge. Monitoring other backup tools is always free. See the pricing page.
Where does managed storage keep our data?
In a dedicated, locked location for your organization in the Azure region you confirm: the same country first, then the same residency area, with a locked second copy in the same jurisdiction. Where a country has only one Azure region, the second copy goes elsewhere only with your consent.
Does it replace ITOps360's backup view?
ITOps360 keeps the backup health view: per-device health, alerts and tickets. BackupVision360 does the backing up and restoring, and feeds its health, and that of the tools you already run, into ITOps360.
See it on your own estate
Walk through your clouds, identities and devices with a specialist in 30 minutes, or get a scored report from a free assessment.