Skip to main content

Backups

The One Backups is a multi-tenant data protection platform built for MSPs. It covers endpoint backup agents on workstations and servers, SaaS data protection for Microsoft 365 and Google Workspace, and unified monitoring across third-party backup vendors — all from a single console.

What Backups Does​

CapabilityDescription
Endpoint Backup AgentFile-level and image backup from Windows/macOS/Linux devices via the unified RMM agent
Backup PoliciesConfigurable rules defining what gets backed up, when, and how long to keep it — scoped to individual devices, sites, companies, or your entire tenant
Retention SchedulesGrandfather-Father-Son (GFS) retention with daily, weekly, monthly, and annual tiers — up to 7-year annual retention for compliance requirements
SaaS BackupsMicrosoft 365 (Exchange, OneDrive, SharePoint, Teams) and Google Workspace (Gmail, Drive, Calendar, Contacts) via OAuth consent, with daily incremental sync
Restore ProceduresGranular file-level, point-in-time, bare metal, and cross-device restore — including single-item SaaS restore
DR TestingScheduled and on-demand automated restore tests to an isolated environment, with pass/fail reporting per device
Backup Health MonitoringPer-device and per-client health dashboard with SLA compliance tracking and PSA ticket integration on failure
Storage TieringAzure Blob hot/cool/archive tiering — fast restore for recent data, cost-optimized cold storage for long-term retention
Multi-Vendor MonitoringUnified view across Datto, Veeam, Acronis, and Cove/N-able (monitoring only — jobs are managed in each vendor's platform)

Pricing​

TierPrice
Workstation (standalone)$2/workstation/month
Server (standalone)$4/server/month
Endpoint Protect (RMM + Backups)$4/ws/month, $8/server/month
Endpoint Complete (RMM + EDR + Backups)$10/ws/month, $18/server/month
SaaS — Microsoft 365$0.50/user/month + $0.05/GB
SaaS — Google Workspace$0.40/user/month + $0.05/GB

Unified Agent Architecture​

Backups runs as a module of the shared agent — the same binary that powers RMM and Defend. When you enable the Backups module on a device, there is no separate install. The agent activates the backup module over its existing secure management channel and begins executing the assigned policy on the next scheduled backup window.

This means:

  • Existing RMM-enrolled devices can be protected immediately by enabling the module
  • Agent updates, certificate rotation, and health reporting are shared with RMM
  • The hardware_fingerprint enrolled during RMM enrollment is reused as the device identity in backup catalogs

Where Backups Fits in the Stack​

Backups integrates with multiple products in the platform:

  • PSA — Failed backup jobs automatically create PSA tickets; SLA breach alerts are routable to your service desk queues
  • RMM — Backup health is surfaced on the device view in RMM; agent module activation is managed from the RMM console
  • Defend — When Defend detects ransomware, it triggers immediate backup verification; confirmed ransomware events can initiate Rewind Recovery using the most recent clean backup
  • CMDB — Backup protection status is visible on every asset record in CMDB; unprotected devices appear in compliance reports
  • On-Call — Backup SLA breach can escalate to the on-call rotation for after-hours response
  • Books — Backup usage is billed monthly through The One Books; usage snapshots are taken nightly
ℹ️Endpoint backups require an active Hub organization and at least one device enrolled via The One RMM. SaaS backups require an active Hub organization and administrative access to the M365 or Google Workspace tenant being connected.

Next Steps​