TEKWURX LIMITED

Barracuda Cloud-to-Cloud Backup

The service provides comprehensive backup and recovery for Microsoft 365 and Entra ID data, enabling customers to securely store encrypted backups in the cloud. It enables data backup and granular recovery for Exchange, OneDrive, SharePoint, Teams, OneNote, and Entra ID. The service provides point-in-time recovery, scheduled and on-demand backups.

Features

• Automated backups: Scheduled, automatic backups for Microsoft 365
• Granular recovery: Restore individual emails, files, contacts, or calendar items
• Cross-platform Support: Protects Microsoft 365 (Exchange, OneDrive, SharePoint, Teams)
• Unlimited Storage: No storage limits or additional costs
• Point-in-time Recovery: Restore data from specific time
• Ransomware Protection: Restore clean versions
• Compliance and Legal Hold: Supports legal hold and eDiscovery
• Encrypted Backups: Data is encrypted in transit and at rest
• User Self-Service: Users can restore their own files
• Centralised Management: Single management dashboard

Benefits

• Increased protection against accidental deletions, malicious attacks, or sync errors
• Minimises downtime by quickly restoring critical data
• Reduce on-premises backup infrastructure costs
• Improved data retention and protection regulatory complaince
• Reduced burden on IT teams through automation and self-service
• Improved data recoverability - improved peace of mind
• Enhanced security with data encryption and secure access controls
• Improved productivity through user self-service
• Enhanced disaster recovery
• Scales to support growth without additional hardware or software

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@tekwurx.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

362696129676033

Contact

Nik Dimmock
+44 203 740 1905
sales@tekwurx.com

About your service

• Service categories:

  Applications

  Production and operations

  • Other operations
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes
• What software services is the service an extension to: Microsoft 365
• Cloud deployment model: Public cloud
• Service constraints: The Barracuda Email Protection Add-In supports Outlook and Outlook Web Access (OWA) for Microsoft Office 365. The Barracuda Email Protection Add-In will work with an Outlook instance if the following conditions are met:; ; Outlook clients must support a minimum API requirement set of 1.5. See Microsoft Outlook Client Support to determine if your client version qualifies. (Example: The Barracuda Email Protection Add-In would not work with Outlook 2013 for Windows because it only supports an API requirement set up to 1.4.); Users must have a Microsoft 365 account to use the Add-In.
• System requirements: Outlook and Outlook Web Access (OWA) for Microsoft Office 365

User support

• Email or online ticketing support: Yes
• Support response times: Barracuda Support Service depends on the level of support purchased. Please refer to https://www.barracuda.com/company/legal/terms-and-conditions/support-services-terms
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Barracuda Support Service depends on the level of support purchased. Please refer to https://www.barracuda.com/company/legal/terms-and-conditions/support-services-terms
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We provide a range of formal and informal education. This is delivered on-site or remotely to suit the customer. Users have access to web-based documentation
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: While your subscription is active, you can access and retrieve a copy of your customer data at any time and for any reason. If data export requires assistance of Barracuda personnel or constitutes a bulk export, then data export fees may apply.
• End-of-contract process: At the expiration or termination of your service with Barracuda, Barracuda generally stores customer data for 30 days post termination to allow additional time for you to manually export your data or renew your subscription. After this 30-day retention period, Barracuda will fully disable the account and commence deletion of all customer data at its discretion, including any cached or backup copies.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: None
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Web GUI to administer the product
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: Unknown
• API: No
• Customisation available: Yes
• Description of customisation: Administrators can customise the service by defining rule sets, notifications and reports

Scaling

• Independence of resources: The platform is built on scalable architecture. This is monitored for availability and performance.

Analytics

• Service usage metrics: Yes
• Metrics types: Subscription details, users and mailboxes
• Reporting types: Real-time dashboards
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Barracuda, BMC Helix, EasyVista, Lansweeper

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Other
• Other data at rest protection approach: Unknown
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Customers can export data. Please note that all customer data will be securely removed from Barracuda's systems 30 days after the contract end date.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: Private network or public sector network
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The Service includes multiple capabilities. Service Level Agreements apply only to specific components as stated below. Barracuda publishes Service status updates at:; https://status.barracuda.com.; ; - Impersonation Protection and Incident Response. These capabilities do not include a service level agreement for uptime or availability.; - Email Gateway Defence. Barracuda offers the following SLA commitments to customers with a paid subscription to the Email Gateway Defence SaaS application (excluding free trials and suspended accounts):; 1. Email Delivery Commitment. Subject to the Exceptions in section 3 and the exclusions listed below, Customers will be able to send and receive email via Barracuda’s email servers at least 99.9% of the time per calendar month.; This commitment excludes:; ▪ Emails with encrypted or password-protected attachments; ▪ Emails subject to complex full-text content policies; ▪ Bulk emails to large distribution lists (which may be serialised); ▪ Customer or third-party internet failures; ▪ Customer-induced viruses; ▪ Non–RFC-822-compliant mail servers; ▪ “Open relay” server configurations; 2. Web Uptime Commitment Subject to the Exceptions in section 3 below,; Customers will be able to access the Email Gateway Defence management; console at least 99.9% of the time during each calendar month,
• Approach to resilience: Barracuda’s continuity focus is to continually strengthen our resiliency and redundancy to provide; our global business partners and customers with consistent, reliable, and continual services. With; the existence of effective and reliable processes, our partners and customers can count on us; during a critical event to continue providing services with minimal disruptions.
• Outage reporting: Email alerts and a public dashboard https://status.barracuda.com/

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Username & password, MFA, Entra-ID
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: The Barracuda security team implements technical and organization controls, via internal policies, procedures, and oversight activities, to protect and secure customer data and confidential information. For more product-specific security information, customers can request a copy of the relevant SOC 2 audit report.; ; https://trust.barracuda.com/security#TabNav
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Unknown
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: If Barracuda becomes aware of any security event that results in the loss, disclosure, or alteration of the Customer Data stored by Barracuda, (“Security Incident”), Barracuda will promptly (1) notify the relevant Customer of the Security Incident; (2) investigate the Security Incident; and (3) take reasonable steps to contain and mitigate the effects of the Security Incident.; ; Barracuda will notify the customer of relevant Security Incidents by a means selected by Barracuda, including via email.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Barracuda uses a defense-in-depth strategy and proprietary hardened software and operating systems to protect data and services. Barracuda conducts regular inspections to ensure the security of its systems
• Incident management type: Supplier-defined controls
• Incident management approach: If Barracuda becomes aware of any security event that results in the loss, disclosure, or alteration of the Customer Data stored by Barracuda, (“Security Incident”), Barracuda will promptly (1) notify the relevant Customer of the Security Incident; (2) investigate the Security Incident; and (3) take reasonable steps to contain and mitigate the effects of the Security Incident.; ; Barracuda will notify the customer of relevant Security Incidents by a means selected by Barracuda, including via email.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: 14-day free trial

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 5%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 5%
• Between £2,500,001 and £5,000,000: 5%
• Over £5,000,001: 5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 20b11a27-f6fe-4761-bc64-cca8b0888d47
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
    • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@tekwurx.com. Tell them what format you need. It will help if you say what assistive technology you use.