- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
Datto SaaS Protection
Your mail and files live in Microsoft 365 or Google Workspace. Their recycle bins are not a backup — Datto SaaS Protection backs up Microsoft 365 and Google Workspace up to three times a day and keeps the copies indefinitely — sold through MSPs, stored in six countries outside Asia, with threat protection and Entra ID backup as extras.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The Datto platform family
This page covers Datto SaaS Protection — including the SaaS Defense add-on and Backup for Microsoft Entra ID. The rest:
Quick facts
30-second orientation- Product
- Independent backup of Microsoft 365 and Google Workspace
- Maker
- Datto, a Kaseya company since June 2022; formerly Backupify
- Backups
- Up to three a day, plus extra runs on demand
- Retention
- Infinite Cloud Retention on current subscriptions
- Price
- No per-seat price published; quoted through an MSP
- Billing
- Committed Minimum Quantity plus usage since Dec 2025
- Extras
- SaaS Defense is an add-on; Entra ID backup is licensed apart
- Analysts
- No analyst placement for Datto; G2 badges are user reviews
- India
- No Asian storage region; the copy is held outside India
- In India via
- TechBag — MSP match, sizing and support
Understand SaaS backup before you buy one
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is SaaS backup?
SaaS backup keeps an independent copy of Microsoft 365 or Google Workspace data outside the tenant, so a deletion or ransomware there cannot reach it.
Recycle bins and retention policies vs an independent SaaS backup — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Recycle bin and retention policies | Datto SaaS Protection |
|---|---|---|
| Recovering a deleted mailbox | The recycle bin, if still inside its window | Point-in-time restore from any kept snapshot |
| A leaver’s files | Keep paying for the licence or lose the data | Cross-user restore into the successor’s account |
| Ransomware in OneDrive | Hope version history reaches back far enough | Restore from a snapshot taken before the encryption |
| Long-term retention | Retention policies inside the same tenant | Infinite Cloud Retention in a separate cloud |
| Proof for an auditor | Screenshots of admin settings | A daily backup success report for each client |
| What it is NOT | — | An India-held copy — there is no Asian region |
The cheapest test is a one-tenant pilot: back up, then restore one mailbox point-in-time and one leaver's OneDrive into another account.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Connector
An admin authorises SaaS Protection on the Microsoft 365 or Google Workspace tenant; it then pulls mail, files, sites and calendars through their APIs, with no agent on any PC.
Storage
Copies sit in data centres in one of six countries: the US, Canada, the UK, Germany, Iceland or Australia. The newer platform keeps them in one data centre, with no second-site copy yet.
Portal
The MSP sees each client’s licence use and backup status on one screen, receives a daily backup success report, and runs point-in-time, cross-user and export restores from there.
Add-ons
SaaS Defense adds Microsoft 365 threat protection and spam filtering as an add-on; Backup for Microsoft Entra ID, a separate licence since October 2025, backs up identities up to six times a day.
API connectors into your tenant — copies held in Kaseya's cloud in one of six countries, run from one MSP portal.
Nine capabilities. Back up, recover, extend.
Datto SaaS Protection keeps an independent copy of Microsoft 365 and Google Workspace outside the tenant.
Three runs a day, more on demand
Microsoft 365 and Google Workspace are backed up automatically up to three times a day, and an admin can start an extra run at any time.
Exchange to Teams, one licence
Exchange mail, Calendar, Tasks, OneDrive, SharePoint and Teams are covered; unlicensed shared mailboxes and SharePoint sites need no paid seat.
Gmail, Drive and Shared Drives
Gmail, Drive, Shared Drives, Calendar and Contacts are covered, and inactive Google Workspace users’ data can be kept for as long as you need it.
Roll back to before the incident
Pick a snapshot from before a deletion or ransomware hit and restore it non-destructively, with the original file and folder structure kept.
Restore into another account
One Microsoft 365 or Google Workspace user’s data can be restored into another’s account — the usual step when a leaver’s files pass to a successor.
PST and standard-format export
Whole accounts or single items export in standard file formats, with PST for Exchange mail, when a lawyer, auditor or new platform needs a copy.
Infinite Cloud Retention
Current subscriptions keep snapshots indefinitely, rolling dailies into weeklies and then monthlies after a year; legacy plans could stop at one year.
Threat protection, as an add-on
SaaS Defense scans Microsoft 365 for threats and filters spam. Sold with backup it is called SaaS Protection+, but it is always an extra licence.
Identity backup, licensed apart
Backup for Microsoft Entra ID, launched October 2025, covers users, groups, roles and policies up to six times a day; it restores alongside SaaS Protection.
Watch Datto SaaS Protection in action
A SaaS Protection overview and launch video from 2019, and two 2021 SaaS Defense explainers — older interfaces, same product.
Datto SaaS Protection Overview
The product end to end, in the 2019 interface.
Introducing Datto SaaS Protection
Why a SaaS copy outside Microsoft and Google matters.
What Is Datto SaaS Defense And How Does It Work?
The threat-protection add-on for Microsoft 365.
Datto Labs: How To Use the Outlook Plugin to Report False Positives & Threats with SaaS Defense
How users report threats and false positives from Outlook.
Want a live, India-context walkthrough for your environment?
Book a guided demo →Microsoft and Google keep the service running. SaaS Protection keeps a copy of your data outside it.
Here’s what genuinely sets it apart — and exactly where it stops.
Built for an MSP’s whole client list
SaaS Protection is designed for providers running many tenants: one console shows every client’s licences and backup status, discounts count across all the licences an MSP sells, and it sits beside Datto RMM and Autotask PSA in the Kaseya stack most Datto partners already run.
Retention that does not run out
Current subscriptions carry Infinite Cloud Retention: snapshots roll up from dailies to weeklies to monthlies but are not deleted for age, so a leaver’s mailbox from three years ago is still there. Up to three runs a day keep the newest recovery point within hours.
Two suites, one product
Microsoft 365 and Google Workspace are covered by the same product and portal, with point-in-time and cross-user restore on both. A group that runs Gmail in one company and Exchange in another does not need two backup vendors or two consoles.
Where it stops
There is no Asian storage region, so an Indian firm’s copy sits in the US, Canada, UK, Germany, Iceland or Australia, and the newer platform keeps it in one data centre. No per-seat price is published, Entra ID backup is a separate licence, and you buy through an MSP.
The numbers behind the platform
What your Datto SaaS Protection rollout looks like
Count users and tenants
List every Microsoft 365 and Google Workspace tenant, licensed user, shared mailbox and site; that count sets the committed minimum.
Settle the storage country
Pick which of the six countries may hold your copy, since none is in Asia, and have legal or compliance sign it off in writing.
Connect and seed
Your MSP authorises the tenant and runs the first full backup; large tenants take longer as Microsoft and Google throttle their APIs.
Test real restores
Restore one mailbox point-in-time, one leaver’s OneDrive cross-user and one PST export, and time each against your recovery targets.
Add the extras
Decide on SaaS Defense and Entra ID backup, fix the committed minimum at steady headcount, and review the daily success report.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“A departing partner’s OneDrive held the only copy of client files. Cross-user restore moved them to his successor within the hour.”
“Our MSP already runs Datto RMM and Autotask for us, so SaaS backup arrived in the same portal with licence counts per client.”
“The auditor asked where the backup sits. The answer was Australia, not India — fine for us, but get the country in writing first.”
“The move to a committed minimum changed our renewal maths. We set the floor at steady headcount, not the seasonal hiring peak.”
“Gmail in one subsidiary, Exchange in the other. One product, one console and three backups a day on both sides of the group.”
“SaaS Defense caught phishing our mail filter missed, but it is an add-on — budget for it rather than assume backup includes it.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and G2 retired its Grid. So here’s TechBag’s synthesis of the SaaS backup market — tap any vendor to see why it sits where it does.
TechBag SaaS Backup Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Quoted through MSPs; Kaseya 365 User reported at $3.75 per user a month.
Storage Choice × App Coverage
The grid nobody publishes — where the backup copy can be stored, India included, vs how many SaaS apps and identity stores it covers.
M365 and Google; six storage countries, none in Asia.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Datto SaaS Protection vs the SaaS backup field
Against Axcient x360Cloud, AvePoint Cloud Backup, Veeam Backup for Microsoft 365, IDrive Cloud-to-Cloud Backup and Druva SaaS Apps — on coverage, price, storage, retention, security and India.
| Dimension | Datto SaaS Protection | Axcient x360Cloud | AvePoint Cloud Backup | Veeam Backup for M365 | IDrive Cloud-to-Cloud | Druva SaaS Apps |
|---|---|---|---|---|---|---|
| What it is | Kaseya SaaS backup | MSP SaaS backup | Multi-SaaS backup | Self-hosted M365 backup | Six-app SaaS backup | SaaS-native backup |
| Deployment | Kaseya cloud only | Axcient cloud only | Their storage or yours | Your servers, your store | IDrive cloud only | Druva cloud on AWS |
| Coverage | M365 + Google | M365 + Google | Widest app list | Microsoft 365 only | Six apps + Entra ID | M365, Google, Salesforce |
| Pricing model | Per licence, quoted | Per seat, quoted | Users or data volume | Per protected user | Per seat, month or year | Per user, by plan |
| Published entry price | Not published | Not published | No list; G-Cloud £1.50 | Free for 10 users | $20/seat/year | Not captured |
| Add-ons and Entra ID | Defense, Entra extra | No Entra ID | Entra ID in the list | Entra ID elsewhere | Entra ID $10/seat/year | Identity plans apart |
| Storage and fair use | Fair use, pooled | 100 GB/seat, pooled | Unlimited or your own | You provide it | Unlimited for M365 | Pooled per licence |
| Frequency and retention | 3x daily, no age limit | 1/day, up to 10 years | Long-term retention | Your schedule and rules | 3x daily; SFDC daily | Policy-driven |
| Security depth | SOC 2; one site | AirGap, no purge | Warranty, not detail | As safe as your store | AES-256, IDrive key | Air gap plus MDDR |
| Integrations | Kaseya stack | PSA ticketing | Elements for MSPs | REST API, PowerShell | IDrive 360 add-on | Search and legal hold |
| India storage region | No Asian region | US, Canada, Europe | Your own India storage | Anywhere you host | India for M365 only | Mumbai (ap-south-1) |
| Support and trial | Through your MSP | 14-day trial | Terms not listed | Free tier to try | 7-day trial | Trial; tiers unstated |
| Lock-in and exit | Export before you go | PST and JSON export | Copies you can hold | Data stays with you | Monthly; download data | Held by Druva |
| Best fit | Kaseya-stack clients | ConnectWise MSPs | Widest SaaS estates | M365 teams with storage | Price-led small firms | India-held multi-SaaS |
Which approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose Datto SaaS Protection if…
- ✓Your MSP already runs Datto RMM or Autotask PSA and wants SaaS backup in the same Kaseya stack
- ✓You run Microsoft 365, Google Workspace or both, and want up to three backups a day with no age limit on retention
- ✓Your auditors accept a copy stored in the US, UK, Germany, Canada, Iceland or Australia
Compare alternatives if…
- ✓The copy must stay in India — IDrive offers an India region for Microsoft 365 and Druva stores in Mumbai
- ✓You want a price you can check yourself — IDrive publishes $20 a seat a year
- ✓You also need Salesforce or Dynamics 365 backed up — AvePoint and Druva cover more apps
Do not expect…
- ✓An Asian or Indian storage region
- ✓Entra ID backup or SaaS Defense inside the base licence
- ✓A per-seat price without an MSP quote
Datto SaaS Protection is one of 20 saas backup products TechBag carries. The SaaS Backup guide narrows them to a shortlist and shows the reasoning. →
What does recovering lost SaaS data cost you?
Drag the sliders (Microsoft 365 or Google users; IT-hour cost). Estimates model IT time spent recovering deleted mail and files, moving leavers' data and answering retention requests at an assumed 1.5 hours per user a year, with 70% of it removed by point-in-time and cross-user restores. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
Published: no per-seat price — Datto quotes SaaS Protection per licence through MSPs, with discounts counted across each MSP's whole client base. Since December 2025 standalone billing is the higher of a Committed Minimum Quantity or actual usage. Kaseya 365 User, which includes SaaS backup at 60 GB per user with a 50-licence minimum, is reported at $3.75 per user a month (a trade-press figure, not a Kaseya list). TechBag finds the MSP and checks the quote against your headcount.
SaaS Protection (standalone)
Best for clients who need backup only
- Per licence, quoted by your MSP
- Committed minimum plus usage since Dec 2025
- SaaS Defense and Entra ID backup extra
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
Kaseya 365 User
Best for 50+ users who want security too
- Reported $3.75 per user a month
- SaaS backup with 60 GB per user
- Minimum of 50 licences
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
How many licensed users, shared mailboxes and sites need cover? Unlicensed shared mailboxes and SharePoint sites need no paid seat.
Microsoft 365, Google Workspace or both? Both are covered; Salesforce and Dynamics 365 need a different product.
Can your backup copy sit outside India? SaaS Protection stores in six countries, none in Asia — confirm your regulator agrees.
Is the committed minimum set at steady headcount? Since Dec 2025 you pay the higher of that commitment or actual usage.
Would Kaseya 365 User suit better? It includes 60 GB of SaaS backup per user but needs at least 50 licences.
Must Entra ID users, groups and policies be restorable? That needs the separate Backup for Microsoft Entra ID licence.
Do you want threat protection and spam filtering too? SaaS Defense is an add-on, sold with backup as SaaS Protection+.
What happens to your history if you change MSP or product? Plan PST and standard-format exports before the term ends.
Questions buyers ask
Ready to evaluate Datto SaaS Protection?
Count your users, tenants and shared mailboxes first, or let a TechBag advisor match you with a Datto MSP and confirm where your copy will be stored.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.