How C2CBackup keeps your Office 365 and Google Workspace backups secure, private and under your control.
C2CBackup is ISO 27001 certified, which is an internationally recognized accreditation for information security management. We are also HIPAA certified and can provide a BAA Agreement on request.
C2CBackup participates in the Cloud Security Alliance STAR (Security, Trust and Assurance Registry) program using CSA’s Cloud Controls Matrix (CCM). CCM is a framework of cloud-specific security controls ensuring that participating organisations adhere to leading industry standards, best practices and regulations.
All data is stored in Amazon S3 storage and encrypted using advanced AES-256 bit encryption algorithms. Transmitted data is encrypted and secured using SSL (HTTPS) enabled servers.
C2CBackup uses a unique encryption key for each customer, and the keys are securely stored. Use of a unique S3 folder for each customer ensures data isolation.
Additionally, every backup task has its own initial vector, which is stored securely and separately from the user key. This technique helps C2CBackup to encapsulate the users’ data.
Our servers are strongly secured, hardened and include the latest security patches. Only a very limited number of C2CBackup’s core team members have access to production keys.
C2CBackup uses industry standard OAuth for permission based access when possible, eliminating the need to enter or store user credentials on the C2CBackup system.
The OAuth “token” limits access to exactly what C2CBackup needs to do and doesn’t provide general access to your account. You can revoke authorization at any time. If OAuth is not available for a specific service then credentials are stored using advanced AES-256 bit encryption algorithms.
You can add Two-Factor authentication to your C2CBackup account for additional security from the Account Settings page using any industry standard authentication app.
Payment processing, including credit card information, is hosted by our payment processor which is fully PCI compliant. No payment information is handled or stored on the C2CBackup system.
Customer backup data is not accessible directly; it can only be accessed using the C2CBackup platform. C2CBackup backups can only be activated, deactivated or restored by the customer’s Data Administrator.
Internal C2CBackup staff do not have access to customer data, and only a limited number of core team members have access to production keys based on a “need to know” policy for problem resolution.
All backup data is retained as long as you maintain your C2CBackup subscription. If you choose to cancel your subscription, your data will be deleted from the C2CBackup archives within 2 weeks.
If you deactivate an individual user backup or database table/domain, that data will be deleted within 24 hours, so we recommend downloading the data prior to de-activation if you want to retain the backed up data for local archiving.
C2CBackup archives can optionally be stored in Amazon U.S., European or Australian data centers as needed for compliance with data privacy directives.
C2CBackup is certified Microsoft Platform Ready, and our application has been reviewed and verified secure by Microsoft, Amazon Web Services, Salesforce.com and Google.
5-minute setup. Test the backup solution - no credit card required.