How far is Atlassian in backup solutions?

[Berik Irgebayev]

Hi,

I was given a task of investigating backup solutions and to check what is included in our own (JSM premium cloud) in terms of backup.

The task was given with the intentions of complying with ISO 27001 certification.

What is the difference between Hycu (third party backup solution) and Atlassian's own solution? What happens in the event of data loss or production environment crashing? What is the guarantee that is being given by Atlassian for JSM Premium cloud? 99,99%?

Hope to hear from you soon as this can potentially save a lot of costs looking for a third party solution in the event of a major downtime of our JSM.

[Susan Waldrip · Accepted solution]

Hi @Berik Irgebayev, in addition to @Daria Kulikova's great article suggestions, here's a good list of considerations when looking at backup/restore/recovery apps and some resources on the Shared Responsibility Model (which is exactly what you're asking about): Guide to Atlassian Shared Responsibility Model, and Shared Responsibility: Definition and Best Practices for SAAS Providers and Customers.

The bottom line is, Atlassian enables you to manually run a backup and download the resulting file which you can then upload (and you can split it into multiple files, as they suggest); the drawbacks are that you can't schedule this backup, any backup you create will overwrite the previous backup, and the backup file is only stored for 14 days and is then gone (but if you download it, you can obviously have it forever). Hope this helps!

[Vish Reddy _Revyz_]

Hi @Berik Irgebayev 

I am from Revyz, We offer a data management solution which helps you address the following use cases:

1. Backup & Granular Restore of Jira / JSM configuration and projects 

2. Backup & Granular Restore of Assets

3. Copying data / Configuration from Sandbox to Production 

4. Security Analytics -> Who deleted what and when

5. Admin focussed Analytics -> Easy way to identify what changed and more

6. Ability to bulk cleanup your Jira site

The Revyz apps are available through the Atlassian Marketplace. Here is a link to what we support and more importantly what we do not support. This should give you a framework on comparing the various third party vendors in the Atlassian Marketplace

@Susan Waldrip has some great pointers on what you should review. 

Here are links to some Atlassian article if you have not yet seen them already:

- Atlassian Security Practices

We do not use these backups to revert customer-initiated destructive changes, such as fields overwritten using scripts, or deleted issues, projects, or sites. To avoid data loss, we recommend making regular backups.

- Atlassian Cloud Security Shared Responsibilities

[Daria Kulikova]

Hello @Berik Irgebayev ,

Look at these two blog posts: 

Exploring the Best Jira Cloud Server Backup Tools for Ensuring Data Protection and Recovery - https://xopero.com/blog/en/exploring-the-best-jira-cloud-server-backup-tools-for-ensuring-data-protection-and-recovery/

How To Back up Jira: Backup Best Practices - https://gitprotect.io/blog/jira-backup-best-practices/

Also, take a look at GitProtect backup & DR software, the solution is SOC 2 and ISO 27001 compliant, so it can help you meet compliance requirements as well: https://marketplace.atlassian.com/apps/1228719/gitprotect-io-backups-for-jira-cloud?hosting=cloud&tab=overview