Wavenet

Datto SaaS Protection for Microsoft 365

Datto SaaS Protection for Microsoft 365 safeguards your critical cloud data with comprehensive backup, recovery, and security solutions. Protecting Exchange Online, SharePoint Online, OneDrive for Business, and Microsoft Teams data, it ensures resilience against accidental deletions, security threats, and data loss.

Features

• Cloud Data Backup: Protects Exchange, SharePoint, OneDrive, and Teams.
• Granular Restore Options: Easily restore individual items or entire mailboxes.
• Ransomware Detection: Identifies and mitigates ransomware threats in real-time.
• Multi-Factor Authentication: Enhances security with additional authentication layers.
• Automated Daily Backups: Ensures regular, hassle-free data protection.
• Security Controls: Comprehensive security measures to safeguard critical data.
• Centralised Management: Manage backups and settings from a single dashboard.
• 24/7 Support: Access expert assistance around the clock.
• Flexible Recovery: Tailor recovery options to meet specific needs.
• Seamless Integration: Works seamlessly with Microsoft 365 environments.

Benefits

• Data Resilience: Protects against accidental deletions and security threats.
• Simplified Management: Centralized control for streamlined administration.
• Enhanced Security: Robust measures to safeguard critical cloud data.
• Rapid Recovery: Quick restoration of data to minimize downtime.
• Compliance Assurance: Helps meet regulatory requirements with reliable backups.
• Cost Savings: Prevents costly data loss incidents and associated downtime.
• Peace of Mind: Confidence in data protection and recovery capabilities.
• Scalability: Adaptable solutions to support growing business needs.
• Proactive Threat Detection: Identifies and mitigates ransomware and security risks.
• Continuous Availability: Ensures access to critical data whenever needed.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector@wavenet.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

104339446869775

Contact

Joe Ewins
0333 234 0011
publicsector@wavenet.co.uk

About your service

• Service categories:

  Systems Infrastructure Software

  Storage

  Data replication and protection

  • Data Protection Software
  • Backup and Recovery Reporting Software
  • Replication Management Software
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Microsoft 365, SharePoint Online, Exchange Online, OneDrive for Business
• Cloud deployment model: Private cloud
• Service constraints: Datto SaaS Protection will not work with personal versions of MS365 (i.e. home, family etc). It also cannot backup Microsoft 365 data located in GCC High Government Cloud or DOD Legacy K1 (Exchange kiosk) licenses. Unsupported Google Workspace licences and user types currently include VFE (Vault Former Employees), Archived Users, Suspended Users, Legacy Free Edition, @GMail.com users. M365 does not back up shared and group documents. OneDrive backups do not capture Image Libraries.
• System requirements:
  • MS365 for Enterprise
  • MS365 Not-for-Profit licences
  • MS365 Government licences (G1, G3, G5)
  • MS365 Education Plans (A1, A3,A5)
  • Google Workspace Business Starter/Standard/Plus
  • Google Workspace Enterprise
  • Google Workspace for non-profits (Business/Enterprise)
  • Google Workspace for Education

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: Wavenet support - 30 min to 4 hour response time inside core working hours 9-5 Monday-Friday UK time aligned to incident priority. Extended (M-F 8-8) and 24x7 support options available. Microsoft infrastructure-level support is 24/7/365 for underlying, abstracted hardware
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 A
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Any customers on managed support will have a dedicated account manager and will be assigned a support team of engineers ranging from 1st line to 3rd line in ability. Escalation points are available with optional to follow through with issues until resolution. Costs vary depending on the Azure resources being supported.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: We will set up the Datto SaaS Protection account for you either by uploading client lists from a format such as excel or csv, or by setting up the service to auto-onboard new users.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Facilitation of customer control at the end of the contract is included within the contract cost. As data is a backup (and therefor a copy of existing information) there is no inherent requirement for users to extract their data upon ceasing the contract (although data recovery is a key function of the service so this data can be retrieved if required). The onus on the service is to ensure that the data held is destroyed and in this regard electronic media is securely wiped and sanitized to remove all data and software. For up to sixty (60) days after the effective date of termination of a SaaS account, we will, upon written request, allow you to export or download a copy of Content as provided in the Product Specifications. After such period, we have no obligation to maintain or provide any Content and may thereafter delete or destroy all copies of the Content, unless legally prohibited. Threat Information may be deleted immediately upon termination of a SaaS Defense account. Depending on the Service Subscription, licenses applicable to the SaaS Account may remain.
• End-of-contract process: Once the service fully terminates, Wavenet technical staff will de-commission the customers service ensuring all data base information and call recording and analytics data permanently deleted.
• Documentation accessibility standard: WCAG 2.2 A

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: WCAG 2.2 A
• Description of service interface: The web interface for Datto SaaS Protection for Microsoft 365 offers a user-friendly dashboard with backup configuration options, status monitoring, and restore capabilities for Exchange, SharePoint, OneDrive, and Teams data. Administrators can configure backup policies, monitor backup status, and initiate restores with granular item-level options. Security settings such as multi-factor authentication and ransomware detection enhance data protection, while alerts and reporting features provide visibility into backup performance and compliance. User management tools and access to support resources ensure efficient administration and assistance within the interface.
• Accessibility standards: WCAG 2.2 A
• Accessibility testing: Not known
• API: No
• Customisation available: Yes
• Description of customisation: Buyers can choose users to backup and retention periods for differing costs

Scaling

• Independence of resources: Datto has configured and implemented automated solutions for monitoring system capacity levels and thresholds for alerting as capacities are approached. It employs a geo-wide distribution with elastic capabilities.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide metrics on inbound and outbound calls made from each extension via our web-based call analytics portal.
• Reporting types: Real-time dashboards
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Datto

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with CSA CCM v4.0
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Via a secure web-portal. Portal address to be provided by engineering upon commencement of the service.
• Data export formats:
  • CSV
  • Other
• Other data export formats: XLS
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Datto does not provide a cloud uptime SLA
• Approach to resilience: This is available on request (subject to an NDA)
• Outage reporting: Datto Infrastructure status may be monitored at https://status.datto.com/. Wavenet will email any customer contacts affected should we become aware of any outages.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Wavenet maintains stringent access controls by assigning unique user IDs with robust passwords, adhering to the latest NIST guidelines. Access by Wavenet employees is meticulously logged, including IP addresses, and is under constant monitoring by both IT and Security Information Event Management teams.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Wavenet is an ISO27001 certified company and we adhear to the standard and has an Information security management system drawn from ISO27002 and we follow the NIST standard for cyber securit framework, we are audited on this standard annually, Wavenet is also a CE+ certified company
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Wavenet conform to ISO2000
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Wavenet conform to and follow the NIST standard and ISO27002
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We have continual monitoring with EDR solution feeding into a SIEM that is monitored 24/7 that is monitored by SOC
• Incident management type: Supplier-defined controls
• Incident management approach: Wavenet is ISO27001 certified and we follow the playbook as part of our certification.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 1%
• Between £500,001 and £1,000,000: 2%
• Between £1,000,001 and £2,500,000: 3%
• Between £2,500,001 and £5,000,000: 4%
• Over £5,000,001: 5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: United Registrar of Systems
• ISO/IEC 27001 accreditation date: Thursday 18 July 2024
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: United Registrar of Systems
• ISO 9001 accreditation date: Monday 12 August 2024
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 39aabf05-4ab8-4ee7-adcd-3318af1f9d2f
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 6cc5c85d-03f1-446c-9e9d-7338dfb9f0ce
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Plans for positive actions with community groups.

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector@wavenet.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.