Cirrus Product FAQs

Most common general questions

How does it work?

In simple terms, the Cirrus application connects to your Microsoft 365 account and takes frequent backups of your data, storing them securely in a Microsoft Azure storage account.

Click below for a demonstration video of Cirrus in action.

Cirrus Backup – Features from CT4 on Vimeo.

How does sign up work?

Click below for a demonstration video of the simple sign up process.

Cirrus Backup – Getting Started from CT4 on Vimeo.

What can I backup?

Cirrus can backup all of your data stored in your Microsoft 365 account, including SharePoint sites, Teams channels, Outlook and OneDrive, as well as group mailboxes and sites.

Does the solution backup Teams and SharePoint shared data?

Yes.

Once signed up, how to access Cirrus?

Cirrus can always be accessed from it’s web page, but you can access it from app launcher in Microsoft 365 once the sign up process is done. Browse to office.com and login to access the App launcher.

What permissions need to be applied to my M365 tenancy?

To ensure all of your data is backed up, you will need to provide an account with the Global Admin role assigned.

Can the application be branded for our company?

The Enterprise version of Cirrus supports branding to suit your company, also known as “white-labelling”. Please contact our sales team for more information.

What happens to the users backup data when they are removed or disabled in M365?

Disabled User data is backed up in point of time backups, all data is stored for 7 years by default although other retention periods are available.

What level of M365 admin rights do you need for the backups?

The Cirrus service account requires Global Administrator permissions in order to be able to backup all objects.

Can I use Cirrus for Personal Microsoft Accounts?

No, Cirrus can only be used for Work / School accounts not personal accounts. To understand the difference, please read the following FAQ which explains the difference in detail.

What is the difference between a Microsoft Personal and Work/School account?

When you sign into Microsoft 365 you must always choose if you are using a personal account or a work or school account. Personal accounts are designed for individual users and can group together individual Microsoft personal accounts by family, but personal accounts use a very different authentication method that at this time cannot be backed up by the Veeam software that powers the Cirrus Backup Solution.

Please read the following article from Microsoft that goes into more details about the different between these types of Microsoft 365 Accounts: https://techcommunity.microsoft.com/t5/itops-talk-blog/what-s-the-difference-between-a-personal-microsoft-account-and-a/ba-p/2241897

Where can I submit ideas or feature requests for Cirrus?

Please visit https://cirrusbackup.ideas.aha.io/ to submit ideas and feature requests, all submissions will be considered by our product team.

How is Cirrus different to Veeam M365 licensing?

Veeam does not provide an out of the box backup solution, you still need to build it. While the approximate Veeam cost per license per month is $1.70 AUD, this does not include cloud storage costs, cloud storage ingress and egress costs and the ongoing costs to maintain and monitor your backup solution, including restores. While Veeam can take weeks or months to setup depending upon the level of IT expertise in your organisation, Cirrus automatically deploys all infrastructure, provisions your storage and licenses and can be backing up in 5 minutes without any IT expertise required or potential 3rd party implementation costs. Cirrus also removes all requirement for ongoing maintenance and monitoring, our support team constantly monitors your backups and can remediate any issues before you are aware of them.

Security & Certifications questions

Is it secure?

We’ve invested in technical, physical and administrative safeguards to do our part to help keep your data safe and secure. While we’ve taken steps to help protect your data, no method of electronic storage is completely secure and we cannot guarantee absolute security. We will notify you if there appears to be unauthorised access to your account and we may also restrict access to certain parts of our services until you verify that access was by an authorised user. Examples of security safeguards we have in place are:

    • Front end Web application has been externally verified by 3rd party penetration testing.
    • Cirrus Support is based on RBAC (Role Based Access Controls).
    • Multi Factor Authentication is used for all support access.
    • All Support actions are logged.
    • Cirrus Support engineers only has access to backup logs via the web application with no ability to browse backup content.
    • Admin access to Veeam Server is highly restricted; Support teams are provided admin credentials only for priority one events.
  • Cirrus is underpinned by a Veeam Certified Solution, Veeam Backup for Microsoft Office 365.
  • All granting of admin access is logged.
  • In exceptional circumstances, Senior Cirrus Support engineers may require access to view customer data to resolve a support incident. This will only be granted with written authorisation from the customer. Internal Security audit procedures are in place to ensure that access to customer data is always backed up by written authority and that the access was only provided for the time required to resolve the incident and then immediately revoked.
  • Cirrus users can only restore to their own Microsoft 365 instance or optionally download to their PC (downloads can be turned off using Role Based Access Control settings).
  • All company backup data is held in a dedicated Azure Cool Storage Account, storage accounts are never shared.
  • Veeam’s advanced 256-bit TLS encryption is used for all inflight and at rest data.
  • Protection is provided against ransomware as deleted files are automatically moved to an air-gapped location that is not visible or accessible to the customer or available to public routing. This service is exclusive to select Veeam Cloud Service Providers running Veeam Cloud Connect.
  • PCI Compliance.
  • All credit card transaction are processed by Stripe LLC, all credit card data is encrypted and monthly charges are made by Cirrus based on the provision of a secure token from Stripe LLC.

Can Cirrus Support access my data?

Cirrus Support only has access to backup logs via the web application which they can access for the purposes of providing issue resolution. They have no ability to browse any files stored by the service.

In exceptional circumstances, Senior Cirrus Support engineers may require access to view customer data to resolve a support incident. This will only be granted with written authorisation from the customer. Internal Security audit procedures are in place to ensure that access to customer data is always backed up by written authority and that the access was only provided for the time required to resolve the incident and then immediately revoked.

Is my data encrypted?

All data will be encrypted while in transit between your site and the backup store, and while at rest in the backup store.

Is the backup solution MFA compatible?

Yes, the backup solution is MFA compatible.

Does Cirrus offer immutable backup?

Yes, Cirrus does offer immutable backup.

What certifications does Cirrus adhere to?

As a SaaS provider, the CT4 groups of companies holds a number of certifications for controlling and managing our applications, specifically our operations companies hold ISO27001, ISO20000 & ISO9001 (link each one to the relevant cert above). The Cirrus M365 Cloud Backup application is deployed in Microsoft Azure which holds certifications to numerous security standards, including ISO27001:2013 and SOC II and the Azure Blob storage accounts we use are certified against multiple security standards including: FINRA 4522 (US) – The Financial Industry Regulatory Authority. For more details on certifications held, please visit the Microsoft Azure Compliance page, or please contact our support ([email protected]) or sales team ([email protected]).

What security standards do you employ?

Cirrus encrypts client data at two points, leveraging Veeam’s advanced 256-bit TLS encryption for all inflight and at rest data.

When connected to Cirrus, you will receive a designated storage account exclusively for your tenancy in an Azure Datacentre in your region. Storage account level encryption is utilized in Azure, we can also enable infrastructure level encryption for your storage account (which acts as a double encryption) if a support ticket is raised. Cirrus uses the LRS redundancy, where three copies of your data are saved in three different disks within the primary region.

Data Residency & Support questions

Where is support located?

Our support staff are located in the United Kingdom and Australia.

Where is my data stored?

Backups are stored in Azure storage accounts in the same region as your customer account.

* New Zealand customer data is currently held in Australian data centres due to a lack of data centres in New Zealand. Microsoft are building a data centre in New Zealand, which future customer data will be held in.

Subscription & Payment Questions

What happens to my data if I cancel my subscription?

After a subscription is cancelled or terminated, backups will be held for up to 30 days. In order to access this data, you must contact Cirrus support to request provision of local backup copies. Cirrus Support will advise you of any charges payable to provide copies of stored data after subscription cancellation.

How is my credit card information secured?

All credit card transaction are processed by Stripe LLC. All credit card data is encrypted and service charges are made by Cirrus based on the provision of a secure token from Stripe LLC.

Does the price include storage?

The price includes unlimited storage.

Does Cirrus offer discounts for annual subscriptions?

Yes. Please contact our sales team to arrange annual payment methods.

Considerations & Limitations

General

As Cirrus M365 backup is powered by Veeam, there are some Considerations and Limitations of the Veeam Backup for Microsoft Office. For full details, please view the details from Veeam: https://helpcenter.veeam.com/docs/vbo365/guide/vbo_considerations.html?ver=50.

Veeam Backup Limitation Summary

  • To back up user mailboxes, make sure that a mailbox has a valid Microsoft Office 365 license. Otherwise a backup job will fail with the following error: “Error: Mailbox doesn’t have a valid Microsoft Office 365 license”.
  • To back up public folder mailboxes, the Veeam Backup account must have a valid Exchange Online license and an active mailbox within the Microsoft Office 365 organization.
  • To back up SharePoint and OneDrive for Business objects, make sure that a user account has a valid Microsoft Office 365 license with SharePoint plan enabled. Otherwise a backup job will fail with the following error: “User %name% does not have a valid Microsoft Office 365 license with SharePoint plan enabled”.
  • Project Web Apps are not supported for backup.
  • If you modify a retention policy tag for a folder, Veeam Backup for Microsoft Office 365 will perform full synchronization of that folder during the subsequent backup job session. For more information, see this Microsoft article.
  • SharePoint site collection recycle bin is not supported for backup.
  • When you perform backup of Microsoft Teams data, Veeam Backup for Microsoft Office 365 does not back up the following objects:
    • Private channels,
    • One-on-one and group chats,
    • For more information about chats in Microsoft Teams, see this Microsoft article. You can use Veeam Explorer for Microsoft Exchange to explore data from user mailboxes and view chat messages as MSG files,
    • Audio and video calls,
    • Video recordings,
    • Contacts,
    • Calendar: information about meetings and meeting chats,
    • Code snippets in posts,
    • Banner notifications in posts,
    • Data of applications added as channel tabs that does not reside in the SharePoint document library of the channel.
  • As part of Microsoft Teams data backup, Veeam Backup for Microsoft Office 365 backs up only the following types of channel tabs: Website, Planner, Word, Excel, PowerPoint, Visio, PDF, Document Library, OneNote, SharePoint, Stream, Forms, Power BI, Flow and Azure DevOps.
  • Veeam Backup for Microsoft Office 365 may not backup OneNote notebooks if their size is more than 2 GB. For more information, see this Microsoft article.