Backup as a Service

In current ransomware attacks, the standard tactic is to take over the backup infrastructure first: according to the Veeam 2024 Ransomware Trends report, backup repositories were targeted in 96% of attacks and attackers succeeded in affecting them in 76% of cases. Protection has two layers: isolating the backup server from the domain, and keeping the last copy in an immutable repository with Object Lock. Both are standard in DataKobi BaaS; the immutable copy cannot be deleted before its retention period expires, even with administrator privileges. In a post-attack scenario, recovery from a clean copy is performed together with malware scanning in an isolated validation environment.

Microsoft's shared responsibility model is clear: keeping the platform running is Microsoft's responsibility, and protecting the data is the customer's. Microsoft will not bring data back once the recycle bin periods for a deleted email have expired, when a malicious insider acts, or when ransomware encrypts OneDrive. DataKobi's M365 backup copies Exchange Online, SharePoint, OneDrive and Teams data to our storage in Türkiye up to 3 times a day; we can restore a single email, a file version or an entire site within minutes. From a KVKK (Türkiye's personal data protection law) perspective, keeping the backup in the country is also a strong compliance argument.