Skip to main content

Beta Help us improve the Digital Marketplace - send your feedback

Avepoint UK Ltd

AvePoint Cloud Backup for M365

Immutable, Air-Gapped 100% SaaS Cloud to Cloud Backups for Microsoft 365.

Features

  • Automated backups up to 4X daily.
  • Full support for multi-geo environments.
  • Unlimited or fully configurable retention options available.
  • BYOS (Bring your own storage) supported.
  • Granular data restores down to item, version, security or settings
  • BYOK (Bring your own key) supported.
  • Fulfil right-to-be-forgotten requests.
  • Self Service Recovery improves recovery times and reduces IT overhead.
  • Multiple restore options including to another user, mailbox or tenant.

Benefits

  • No storage, network or compute provisioning and management required
  • App-Aware recovery
  • Enable backup support without elevating helpdesk user permissions in M365
  • Meet data soverignty requirements
  • Single Pane of glass for M365, Salesforce and Google Workspace
  • Reduce time-to-restore with with fast search or point-in-time restore
  • Meet cyber insurance underwriter's requirements for data protection
  • Express Recovery Options available to further increase RPO/RTO
  • Automatic discovery and protection of new users and workloads
  • 24/7/365 Recovery Support

Pricing

£1.50 a user a month

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at salesuk@avepoint.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

2 7 2 8 4 2 1 9 7 1 7 9 3 7 8

Contact

Avepoint UK Ltd Sarju Raja, Jason Lee, or Adam Callinan
Telephone: 02074215199
Email: salesuk@avepoint.com

Service scope

Software add-on or extension
Yes
What software services is the service an extension to
Requires Microsoft 365
Cloud deployment model
Public cloud
Service constraints
None
System requirements
None

User support

Email or online ticketing support
Email or online ticketing
Support response times
Telephone requests are immediate, other methods will be within 2 hours or more dependant on the severity of the request. For more information https://avepoint.com/products/support.
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 A
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
Web chat
Web chat support availability
24 hours, 7 days a week
Web chat support accessibility standard
WCAG 2.1 A
Web chat accessibility testing
AvePoint conducts extensive Quality Assurance before any release, and follows industry best practices for Accessibility. For further details, contact AvePoint.
Onsite support
Yes, at extra cost
Support levels
AvePoint provides a Premier Support Service which includes 24 hours a day, 7 days a week, 365 days a year. Included within the support service are Hotfixes, Cumulative updates, Service Packs and Platform Upgrades. More information can be found at https://www.avepoint.com/uk/products/support/
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Self-help guides and videos are available to guide users through service set-up, administration, and use. Further onboarding services are defined and agreed in a Statement of Work.
Service documentation
Yes
Documentation formats
HTML
End-of-contract data extraction
Customers may request a copy of the data via our support team. Large amounts of data may incur a charge.
End-of-contract process
The functionality will stop working and the customers obligations will end. Where applicable customer data can be exported.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
None
Service interface
Yes
User support accessibility
WCAG 2.1 A
Description of service interface
Users access services via http://www.avepointonlineservices.com/login. Users have access to available functions through our GUI based on their permissions or role. Optional deployment of Teams App, AVA (AvePoint's Virtual Assistant) allows users to request functions via Teams chats.
Accessibility standards
WCAG 2.1 A
Accessibility testing
AvePoint complies with common accessibility guidelines. In addition, extensive Quality Assurance testing is performed before any release. Customers can optionally subscribe to "Insider Releases" to gain early access to updates, and provide feedback.
API
Yes
What users can and can't do using the API
Configure backups, export data, fetch audit information and integrate with SEIM services
API documentation
Yes
API documentation formats
HTML
API sandbox or test environment
No
Customisation available
No

Scaling

Independence of resources
We employ a number of methods including elastic scaling to manage performance. AvePoint also uses App context authentication where appropriate to further reduce throttling risks.

Analytics

Service usage metrics
Yes
Metrics types
Using AvePoint Cloud Backup you can generate and download reports for the completed backup, restore, or export jobs to view the job summary, job settings, and the failed or skipped objects. In the reports for the restore jobs, the source and destination information can also be seen.
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Security Clearance (SC)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
User control over data storage and processing locations
Yes
Datacentre security standards
Managed by a third party
Penetration testing frequency
At least every 6 months
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
Data sanitisation process
Yes
Data sanitisation type
Explicit overwriting of storage before reallocation
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
Data Export feature is initiated from the user interface. Conditions apply on data volumes.
Data export formats
Other
Other data export formats
  • .PST for Email
  • Format of the file(s) for OneDrive or SharePoint data
  • Requests for bulk data must be submitted directly to AvePoint
  • Compressed File
Data import formats
Other
Other data import formats
Not applicable

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
AvePoint guarantee 99.95% service availability
Approach to resilience
AvePoint leverages Microsoft Azure for hosting it's cloud service, which has a number of data centres for HA.
Outage reporting
AvePoint will notify customer's of any outages or service interruptions via Portal notifications with additional direct communication when appropriate.

Identity and authentication

User authentication needed
Yes
User authentication
Other
Other user authentication
All authentication is carried out against Microsoft Azure or any support Azure authentication method.
Access restrictions in management interfaces and support channels
All authentication is carried out against Microsoft Azure or any supported Azure authentication method
Access restriction testing frequency
At least every 6 months
Management access authentication
Identity federation with existing provider (for example Google Apps)

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
Between 6 months and 12 months
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
Between 6 months and 12 months
How long system logs are stored for
At least 12 months

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
Kompleye
ISO/IEC 27001 accreditation date
23/06/2023
What the ISO/IEC 27001 doesn’t cover
N/A. The Information Security Management System is applicable to secure software development and maintenance process including support business functions like Infosec, IT, HR, Sales and Marketing, Project Management, Operations and Call Centre.
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
No
Cyber essentials plus
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
We have a wide range of InfoSec policies, from usage policies, to the minimization of access with the least privileged concept. And we strive to follow the best InfoSec practices.

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
Change Management is documented, requested, reviewed, approved, tested, and finally rolled out during off hours in order to have minimal effect on customers.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
We use AppScan to perform OWASP testing on every patch release. We subscribe to security bulletins and stay abreast of recent 0 day vulnerabilities as well as maintaining an active patch cycle.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
We leverage the Azure Health Status page as well as service monitoring.
Incident management type
Supplier-defined controls
Incident management approach
Long standing experienced helpdesk available 24x7, breach management procedures.

Secure development

Approach to secure software development best practice
Supplier-defined process

Public sector networks

Connection to public sector networks
No

Social Value

Social Value

Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity

Fighting climate change

AvePoint are a Cloud based delivery organisation therefore reduce the impact of running Datacenters in the organisations

Covid-19 recovery

AvePoint are helping raising the Digital Skills in the region through education platforms

Tackling economic inequality

AvePoint are offering a Digital Inclusion for the digital deprived in the region to raise the skills and ability to find employment

Equal opportunity

AvePoint is a UK employer who has a full equal opportunity approach

Pricing

Price
£1.50 a user a month
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
Get access to free, 30-day trials. If you do not purchase a license at the end of your trial, your license will expire and any data deleted from AvePoint Online Services.
Link to free trial
https://www.avepointonlineservices.com/services

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at salesuk@avepoint.com. Tell them what format you need. It will help if you say what assistive technology you use.