A backup must be safer than the original
Backups hold a complete copy of your business. This is how we keep that copy private, intact and available.
Encryption
Data is encrypted with AES-256 before it leaves the agent or our collector, and travels over TLS 1.2 or newer. Each tenant has its own key. On request, keys can be derived from a passphrase that only you hold — then nobody at Itmendo can read your backups.
Immutability
Backup objects are written with a retention lock. Until the lock expires, they cannot be modified or deleted through the console, the API or by our own staff.
EU data residency
Backups are stored in two data centres in the European Union, in separate locations. Data does not leave the EU unless you explicitly request it.
Access control
Console access requires single sign-on or multi-factor authentication. Roles limit who can browse, restore or change policies, and every action is written to an audit log you can export.
Least-privilege connectors
Connections to Microsoft 365 and Google Workspace use the minimum permissions needed for backup and restore, and can be revoked from your tenant at any time.
Deletion
When you end the service, backups are deleted after the agreed retention lock expires, and you receive written confirmation.
Paperwork included
- Data processing agreement under Article 28 GDPR
- List of sub-processors with locations
- Technical and organisational measures document
- Answers to standard security questionnaires on request
Need any of these for a supplier review? Write to backup@itmendo.com.