Does my MSP or managed IT service provider have access to my backup data on Acronis Cloud?

The video summarizes the blog post below. For full details, please read the blog.

Protecting Your Company's Backup Data from Managed IT Service Providers (MSPs)

‍

As more companies embrace cloud-based backup solutions, concerns about the privacy and security of your data have become increasingly important. Managed IT service providers (MSPs) play a crucial role in managing these backup solutions, but some customers worry about potential access to their sensitive data. Fortunately, there are several ways to protect your company's backup data while still leveraging the expertise of an MSP. In this article, we will explore three effective options for safeguarding your backup data within the Acronis backup solution, although similar options exist with other backup providers.

Option 1: Backup Archive Encryption

For customers who rely on their MSP to manage the backup solution but are concerned about unauthorized access, backup archive encryption is an excellent solution. With backup archive encryption, the data is encrypted before it leaves your company's network and is stored in an encrypted format within the cloud. This ensures that only you, as the customer, hold the decryption key, preventing anyone, including MSP employees, from accessing your sensitive data. By leveraging this encryption feature, you can confidently entrust your backup data to your MSP while maintaining complete control over its security.

Pros:

• Provides an extra layer of security by encrypting backup data.
• Ensures that only the customer has access to the decryption key.
• Allows customers to leverage the expertise of the MSP while maintaining control over data privacy.

Cons:

• Managing encryption keys requires additional responsibility and careful key management.
• In the event of lost or forgotten keys, data recovery may be challenging or impossible.

Option 2: Disabling Support Access

If you prefer to restrict the MSP's access to your backup account entirely, Acronis offers an option to disable support access. This approach allows the MSP to configure the initial setup of the backup solution according to your requirements. Once the setup is complete, you can disable the MSP's access, ensuring that they no longer have the ability to access your account or backup data. This method provides peace of mind for customers who prefer to maintain strict control over their data.

Pros:

• Prevents MSP employees from accessing your backup data.
• Offers full control over account access and data privacy.
• Provides flexibility to configure the backup solution according to your specific needs.

Cons:

• Limits the ability to receive immediate support or assistance from the MSP.
• Requires the customer to handle all future configuration changes and troubleshooting.

Option 3: Self-Service Mode Account Creation

In some cases, the MSP itself may be concerned about accessing their customer's backup account. In such situations, Acronis provides a self-service mode for account creation. This means that the customer takes full responsibility for account configuration, setup, and ongoing management. By opting for self-service mode, the MSP can ensure that they do not have access to their customer's backup account, addressing any concerns regarding data privacy.

Pros:

• MSPs can demonstrate a commitment to data privacy and build trust with customers.
• Eliminates the possibility of MSPs inadvertently accessing customer data.
• Customers retain full control over their backup account and data.

Cons:

• Requires customers to possess the technical expertise to set up and manage the backup solution.
• MSPs may have limited visibility into the backup account, potentially impacting their ability to provide optimal support.

Protecting your company's backup data from MSP access is a valid concern, and it's essential to choose a backup solution that provides the necessary safeguards. Acronis offers three effective options to address these concerns: backup archive encryption, disabling support access, and self-service mode account creation. By leveraging these features, you can ensure that your backup data remains secure and accessible only to authorized individuals. Remember to assess the specific requirements and trade-offs associated with each option to determine the best fit for your organization's needs.

‍