PRODUCT FAQS: Cirrus for Microsoft 365

Most common general questions

How does it work?

In simple terms, the Cirrus application connects to your Microsoft 365 account and takes frequent backups of your data, storing them securely in a dedicated storage account, ready for you to recover what you need, when you need.

What can I backup?

Cirrus can backup all of your data stored in your Microsoft 365 account, including SharePoint sites, Teams channels, Outlook and OneDrive, as well as group mailboxes and sites.

Does the solution backup Teams and SharePoint shared data?

Yes.

Once signed up, how do I access Cirrus?

Cirrus can always be accessed from it’s web page, but you can access it from app launcher in Microsoft 365 once the sign up process is done. Browse to office.com and login to access the app launcher.

What permissions need to be applied to my M365 tenancy?

To ensure all of your data is backed up, you will need to provide an account with the Global Admin role assigned.

Can the application be branded for our company?

The Enterprise version of Cirrus supports branding to suit your company, also known as “white-labelling”. Please contact [email protected] for more information.

What happens to the users backup data when they are removed or disabled in M365?

Disabled user data is backed up in point of time backups, all data is stored for 7 years by default although other retention periods are available.

What level of M365 admin rights do you need for the backups?

The Cirrus service account requires Global Administrator permissions in order to be able to backup all objects.

Can I use Cirrus for Personal Microsoft Accounts?

No, Cirrus can only be used for Work / School accounts not personal accounts. To understand the difference, please read the following FAQ which explains the difference in detail.

What is the difference between a Microsoft Personal and Work/School account?

When you sign into Microsoft 365 you must always choose if you are using a personal account or a work or school account. Personal accounts are designed for individual users and can group together individual Microsoft personal accounts by family, but personal accounts use a very different authentication method that at this time cannot be backed up by Cirrus by Veeam.

Please read the following article from Microsoft that goes into more details about the different between these types of Microsoft 365 Accounts: https://techcommunity.microsoft.com/t5/itops-talk-blog/what-s-the-difference-between-a-personal-microsoft-account-and-a/ba-p/2241897

Security & Certifications questions

Is it secure?

We’ve invested in technical, physical and administrative safeguards to do our part to help keep your data safe and secure. While we’ve taken steps to help protect your data, no method of electronic storage is completely secure and we cannot guarantee absolute security. We will notify you if there appears to be unauthorised access to your account and we may also restrict access to certain parts of our services until you verify that access was by an authorised user. Examples of security safeguards we have in place are:

  • Front end web application is regularly externally verified by 3rd party penetration testing.
  • Cirrus Support is based on RBAC (Role Based Access Controls).
  • Multi Factor Authentication is used for all support access.
  • All Support actions are logged.
  • Cirrus Support engineers only have access to backup logs via the web application with no ability to browse backup content.
  • Admin access to Veeam Server is highly restricted; Support teams are provided admin credentials only for priority one events.
  • All granting of admin access is logged.
  • Cirrus users can only restore to their own Microsoft 365 instance or optionally download to their PC (downloads can be turned off using Role Based Access Control settings).
  • All company backup data is held in a dedicated storage, storage accounts are never shared.
  • Advanced 256-bit TLS encryption is used for all inflight and at rest data.
  • Protection is provided against ransomware as deleted files are automatically moved to an air-gapped location that is not visible or accessible to the customer or available to public routing.
  • PCI Compliance.
  • All credit card transaction are processed by Stripe LLC, all credit card data is encrypted and monthly charges are made by Cirrus based on the provision of a secure token from Stripe LLC.

Can Cirrus Support access my data?

Cirrus Support only has access to backup logs via the web application which they can access for the purposes of providing issue resolution. They have no ability to browse any files stored by the service.

In exceptional circumstances, Senior Cirrus Support engineers may require access to view customer data to resolve a support incident. This will only be granted with written authorisation from the customer. Internal Security audit procedures are in place to ensure that access to customer data is always backed up by written authority and that the access was only provided for the time required to resolve the incident and then immediately revoked.

Is my data encrypted?

All data will be encrypted while in transit between your site and the backup store, and while at rest in the backup store.

Is the backup solution MFA compatible?

Yes, the backup solution is MFA compatible.

What Security Certifications does Cirrus adhere to?

Cirrus by Veeam holds a number of certifications for controlling and managing applications, including ISO27001. The Cirrus for Microsoft 365 application is deployed in Microsoft Azure which holds certifications to numerous security standards, including ISO27001:2013 and SOC II and the storage accounts we use are certified against multiple security standards including: FINRA 4522 (US) – The Financial Industry Regulatory Authority. For more details on certifications held, please visit the Microsoft Azure Compliance page, or please contact our support ([email protected]) or sales team ([email protected]).

What security standards do you employ?

Cirrus by Veeam encrypts client data at two points using advanced 256-bit TLS encryption for all inflight and at rest data.

When connected to Cirrus, you will receive a designated storage account exclusively for your tenancy in your chosen region. Storage account level encryption is utilized in Azure, we can also enable infrastructure level encryption for your storage account (which acts as a double encryption) if a support ticket is raised. Cirrus uses the LRS redundancy, where three copies of your data are saved in three different disks within the primary region.

Data Residency & Support questions

Where is support located?

Our support staff are located in the United Kingdom and Australia.

Where is my data stored?

Backups are stored in your chosen region.

What are your SLA’s?

Our Standard Service Levels are:

  • Severity 1 – Cirrus is unavailable for all users – Target response 1 hour.
  • Severity 2 – Cirrus is not down; but functionality is restricted, or you are unable to login to Cirrus (but login page is available) – Target Response 4 hours.
  • Severity 3 – Backup job has failed, or restores are failing – Target Response 6 hours.
  • Severity 4 – Cirrus performance is degraded but still operational – Target Response 8 hours.
  • Support Available 24 x 7 for Severity 1 & 2 events.
  • Support Available Business hours for Severity 3 & 4 events.
  • System Availability 99.9%.

Subscription & Payment Questions

What happens to my data if I cancel my subscription?

After a subscription is cancelled or terminated, backups will be held for up to 30 days. In order to access this data, you must contact Cirrus support to request provision of local backup copies. Cirrus Support will advise you of any charges payable to provide copies of stored data after subscription cancellation.

How is my credit card information secured?

All credit card transaction are processed by Stripe LLC. All credit card data is encrypted and service charges are made by Cirrus based on the provision of a secure token from Stripe LLC.

Does the price include storage?

The price includes unlimited storage.

Does Cirrus offer discounts for annual subscriptions?

Cirrus for Microsoft 365 is available annually by default. Monthly subscriptions are available upon request.

Considerations & Limitations

Veeam Backup Limitation Summary

  • To back up user mailboxes, make sure that a mailbox has a valid Microsoft 365 license. Otherwise a backup job will fail with the following error: “Error: Mailbox doesn’t have a valid Microsoft 365 license”.
  • To back up public folder mailboxes, the Veeam Backup account must have a valid Exchange Online license and an active mailbox within the Microsoft 365 organisation.
  • To back up SharePoint and OneDrive for Business objects, make sure that a user account has a valid Microsoft 365 license with SharePoint plan enabled. Otherwise a backup job will fail with the following error: “User %name% does not have a valid Microsoft 365 license with SharePoint plan enabled”.
  • Project Web Apps are not supported for backup.
  • If you modify a retention policy tag for a folder, Veeam Backup for Microsoft 365 will perform full synchronisation of that folder during the subsequent backup job session. For more information, see this Microsoft article.
  • SharePoint site collection recycle bin is not supported for backup.
  • When you perform backup of Microsoft Teams data, Veeam Backup for Microsoft 365 does not back up the following objects:
    • Private channels,
    • One-on-one and group chats,
    • For more information about chats in Microsoft Teams, see this Microsoft article. You can use Veeam Explorer for Microsoft Exchange to explore data from user mailboxes and view chat messages as MSG files,
    • Audio and video calls,
    • Video recordings,
    • Contacts,
    • Calendar: information about meetings and meeting chats,
    • Code snippets in posts,
    • Banner notifications in posts,
    • Data of applications added as channel tabs that does not reside in the SharePoint document library of the channel.
  • As part of Microsoft Teams data backup, Veeam Backup for Microsoft 365 backs up only the following types of channel tabs: Website, Planner, Word, Excel, PowerPoint, Visio, PDF, Document Library, OneNote, SharePoint, Stream, Forms, Power BI, Flow and Azure DevOps.
  • Veeam Backup for Microsoft 365 may not backup OneNote notebooks if their size is more than 2 GB. For more information, see this Microsoft article.

Last updated on 21/12/2023.

PRODUCT FAQS: Cirrus Cloud Protect

Most common general questions

What workloads is Cirrus Cloud Protect able to back up?

Cirrus Cloud Protect supports backing up Azure Virtual Machines, Azure SQL and Azure files. In the near future, we’re planning to add support for AWS workloads including Amazon EC2 backup, Amazon RDS backup, Amazon EFS, Amazon VPC backup, Amazon S3 and AWS Outposts. 

Where can I submit ideas or feature requests for Cirrus?

Please visit https://cirrusbackup.ideas.aha.io/ to submit ideas and feature requests, all submissions will be considered by our product team.

What advantages does Cirrus Cloud Protect offer over native Azure/AWS backup?

Cirrus Cloud Protect offers the ability to create a backup copy into a separate air-gapped storage location. Cirrus Cloud Protect also offers cross platform restore to restore your cloud backups into a different cloud provider.  

Can I bring my own storage or do I have to use Cirrus storage?

The primary backup copy will always go to Cirrus storage, but you may connect your own S3 compatible storage for secondary backup copies. 

Can Cirrus Cloud Protect back up on-premises workloads?

This is currently not supported, but we’re looking at adding it in the future. 

Does Cirrus Cloud Protect support cross cloud restore?

Yes, it does. Currently you can restore your Azure VM into AWS, once Cirrus Cloud Protect for AWS is released you’ll be able to restore AWS VMs into Azure.  

Can Cirrus Cloud Protect migrate VM’s between Azure and AWS?

Yes, Cirrus Cloud Protect’s interface allows easy cross cloud restores to migrate VMs between different environments.  

Does Cirrus Cloud Protect include unlimited storage?

Yes, there are no storage limitations, you’ll only be charged for the storage you use.  

What storage options does Cirrus Cloud Protect support?

Primary storage is in a dedicated Azure storage account. Secondary copies can be stored in any S3 compatible storage.

How do I restore an entire Virtual Machine?

Cirrus Cloud Protect’s interface allows easy restore of VMs. 

What if I just need to restore some specific files - do I need to restore the entire Virtual Machine?

Cirrus Cloud Protect supports file level restores and the interface will provide you with a Windows Explorer like experience to select the file you need.  

Security & Certifications questions

Is it secure?

We’ve invested in technical, physical and administrative safeguards to do our part to help keep your data safe and secure. While we’ve taken steps to help protect your data, no method of electronic storage is completely secure and we cannot guarantee absolute security. We will notify you if there appears to be unauthorised access to your account and we may also restrict access to certain parts of our services until you verify that access was by an authorised user. Examples of security safeguards we have in place are:

  • Front end web application is regularly externally verified by 3rd party penetration testing.
  • Cirrus Support is based on RBAC (Role Based Access Controls).
  • Multi Factor Authentication is used for all support access.
  • All Support actions are logged.
  • Cirrus Support engineers only have access to backup logs via the web application with no ability to browse backup content.
  • Admin access to Veeam Server is highly restricted; Support teams are provided admin credentials only for priority one events.
  • All granting of admin access is logged.
  • All company backup data is held in a dedicated storage account, storage accounts are never shared.
  • Advanced 256-bit TLS encryption is used for all inflight and at rest data.
  • Protection is provided against ransomware as deleted files are automatically moved to an air-gapped location that is not visible or accessible to the customer or available to public routing.
  • PCI Compliance.
  • All credit card transaction are processed by Stripe LLC, all credit card data is encrypted and monthly charges are made by Cirrus based on the provision of a secure token from Stripe LLC.

Can Cirrus Support access my data?

Cirrus Support only has access to backup logs via the web application which they can access for the purposes of providing issue resolution. They have no ability to browse any files stored by the service.

In exceptional circumstances, Senior Cirrus Support engineers may require access to view customer data to resolve a support incident. This will only be granted with written authorisation from the customer. Internal Security audit procedures are in place to ensure that access to customer data is always backed up by written authority and that the access was only provided for the time required to resolve the incident and then immediately revoked.

Is my data encrypted?

All data will be encrypted while in transit between your site and the backup store, and while at rest in the backup store.

What Security Certifications does Cirrus adhere to?

Cirrus by Veeam holds a number of certifications for controlling and managing applications, including ISO27001. The Cirrus Cloud Protect application is deployed in Microsoft Azure which holds certifications to numerous security standards, including ISO27001:2013 and SOC II and the storage accounts we use are certified against multiple security standards including: FINRA 4522 (US) – The Financial Industry Regulatory Authority. For more details on certifications held, please visit the Microsoft Azure Compliance page, or please contact our support ([email protected]) or sales team ([email protected]).

What security standards do you employ?

Cirrus by Veeam encrypts client data at two points using advanced 256-bit TLS encryption for all inflight and at rest data.

When connected to Cirrus, you will receive a designated storage account exclusively for your tenancy in your chosen region. Storage account level encryption is utilized in Azure, we can also enable infrastructure level encryption for your storage account (which acts as a double encryption) if a support ticket is raised. Cirrus uses the LRS redundancy, where three copies of your data are saved in three different disks within the primary region.

Data Residency & Support questions

Where is support located?

Our support staff are located in the United Kingdom and Australia.

Where is my data stored?

Backups are stored in your chosen region.

What are your SLA’s?

Our Standard Service Levels are:

  • Severity 1 – Cirrus is unavailable for all users – Target response 1 hour.
  • Severity 2 – Cirrus is not down; but functionality is restricted, or you are unable to login to Cirrus (but login page is available) – Target Response 4 hours.
  • Severity 3 – Backup job has failed, or restores are failing – Target Response 6 hours.
  • Severity 4 – Cirrus performance is degraded but still operational – Target Response 8 hours.
  • Support Available 24 x 7 for Severity 1 & 2 events.
  • Support Available Business hours for Severity 3 & 4 events.
  • System Availability 99.9%.

Subscription & Payment Questions

What happens to my data if I cancel my subscription?

After a subscription is cancelled or terminated, backups will be held for up to 30 days. In order to access this data, you must contact Cirrus Support to request provision of local backup copies. Cirrus Support will advise you of any charges payable to provide copies of stored data after subscription cancellation.

How is my credit card information secured?

All credit card transaction are processed by Stripe LLC. All credit card data is encrypted and service charges are made by Cirrus based on the provision of a secure token from Stripe LLC.

Last updated on 21/12/2023.