Your Backup Strategy Should Add Another Layer of Protection—not Another Question Mark.
SecondSky provides independent Microsoft 365 and Google Workspace protection using a secure cloud-backup platform that encrypts customer data in transit and at rest and supports multiple data-residency regions.
Independent Backup Layer
Built on security controls documented by the underlying backup platform.
SecondSky does not invent its own claims about the backup infrastructure. The controls below reflect the documented security capabilities of the underlying cloud-backup platform.
TLS-protected communications
The underlying backup platform documents encryption for customer data in transit, including TLS 1.3 for platform control communications.
AES-256 at rest
Customer backup data is encrypted at rest using AES-256.
Per-tenant encryption
Microsoft 365 and Google Workspace backup policies use per-tenant managed encryption keys by default, with customer-managed key options available through supported KMS providers.
Data residency options
The underlying backup platform supports Microsoft 365 and Google Workspace data-residency regions in the USA, Canada, Europe, Germany, Switzerland, the United Kingdom, and Australia, with multi-geo capabilities for distributed organizations.
Cloud authorization without asking users to hand SecondSky their Microsoft or Google passwords.
The backup platform supports administrator and, when enabled by administrators, end-user access through supported identity services including Microsoft or Google identity and Okta SAML.
Your organization remains responsible for administering its Microsoft 365 or Google Workspace tenant. SecondSky provides the backup service layer associated with the plan you select.
Provider identity
Access can use Microsoft or Google identity services rather than a separate productivity-account password supplied to SecondSky.
MFA-capable identity
The documented access model uses identity providers that support multi-factor authentication.
Access policies
The backup platform includes documented access-policy controls and account-protection capabilities for administrators.
Protection designed around recoverability, retention, and separation from production data.
Independent backup
SecondSky adds a backup layer separate from the production Microsoft 365 or Google Workspace environment.
Configurable retention
The backup platform supports configurable retention rules, with backup snapshots and item versions retained indefinitely by default unless custom retention is configured.
Archived resources
Backup policies include archiving behavior for resources that are deleted, suspended, archived, or no longer licensed in the source environment, depending on platform.
Recovery validation
SecondSky Backup Assurance adds scheduled non-destructive recovery testing plus a monthly report summarizing protection status, backup health, issues identified, corrective actions, and recovery-test results.
Security claims backed by published the underlying backup platform documentation.
The underlying backup platform is documented as SOC 2 Type II compliant and subject to independent audits.
The underlying backup platform publishes a SOC 3 report describing its Trust Services Criteria controls.
The underlying backup platform is documented as following Cloud Security Alliance STAR principles and participating in the CSA STAR Registry.
The underlying backup platform documents GDPR-related capabilities including EU data-location options, encryption, audit logs, and deletion processes.
The underlying backup platform documents regular penetration testing, secure-code reviews, and independent encryption/key-management assessments.
Security starts with knowing whether your data is actually recoverable.
Take the free 2-minute assessment to identify backup and recovery gaps in your Microsoft 365 or Google Workspace environment.
Questions IT teams and business owners ask before authorizing cloud backup.
Does SecondSky need my Microsoft 365 or Google Workspace password?
The underlying backup platform uses supported identity and authorization mechanisms for cloud access. SecondSky does not need customers to send us their productivity-account passwords.
Is backup data encrypted?
Customer data is encrypted in transit and at rest, including AES-256 encryption at rest.
Where can backup data be stored?
The backup platform supports multiple data-residency regions for Microsoft 365 and Google Workspace, including the USA, Canada, Europe, Germany, Switzerland, the United Kingdom, and Australia. The applicable region for a SecondSky customer will be determined during service configuration.
Can customers use their own encryption keys?
The backup platform supports Bring-Your-Own-Key with major cloud KMS providers. Availability and configuration for a SecondSky customer should be confirmed as part of the service setup.
Does the underlying backup platform have independent security certifications?
The underlying backup platform is documented as SOC 2 Type II compliant, publishes a SOC 3 report, participates in the CSA STAR Registry, and undergoes independent security testing and code review.
Can SecondSky help with recovery?
Managed Backup and Backup Assurance include SecondSky-assisted recovery. Customer access and recovery options available directly through the underlying platform depend on service configuration.
Am I locked into a long-term contract?
No. SecondSky plans are month-to-month with no long-term contract. You can cancel anytime.
Add an independent recovery layer to Microsoft 365 or Google Workspace.
Plans start at $4.99 per user per month with $0 setup fee, month-to-month billing, and no long-term contract.