Transcript
Hi Mike Matchett with Small World Big Data. I am here at RSAC 2025 looking at all the greatest and latest security vendors doing all sorts of things. Cool new stuff and we are here to now talk a little bit about protecting your SaaS data. I believe that's what we're talking about here with Rewind. So let's let's get into a little bit. So Daniel, um, just start a little bit, uh, telling our folks, you know why protecting SaaS data is important. Don't the SaaS vendors protect their data? I think that's probably one of the biggest common misconceptions is that you are now in the cloud, and the cloud is being backed up. Um, unfortunately, that's not the case. Um, all the cloud responsibility they operate under what's called the shared responsibility model. It's actually in the terms of service that they do not provide backups natively. They'll do database snapshots in case of their own infrastructure. But we kind of compare it to a landlord tenant model where the landlord makes sure that the building elevators, staircase is clean, things like that. But when it comes to the data inside your couch, if you mess something up with a, you know, a stain on the couch, That's your responsibility to fix that, clean that, whatever it may be. The same applies to the SaaS data. All right. And I know from some other studies I've seen that people have far more SaaS applications in use than they think they have. Have you guys looked at that? What would you say if sort of a modern organization does for SaaS? Yeah, one of the kind of graphs that we show is the SaaS sprawl that happens over time, right? Since 2013, I think it's increased like 300%. And a lot of companies don't even recognize that where departments are buying themselves. And so the IT department doesn't necessarily control everything. And so as a SaaS sprawl, so does the attack surface. Data loss can happen in any one of these vectors. And it's really up to that department to make sure that they're backing it up. And they're probably under the assumption that the platform itself is doing those backups, which again, is not the case. Yes. I mean, even individuals tend to go off and start to do some shadow it directly and don't. The company never knows about it, but all that corporate IP and stuff is out there, which is a data security problem. But it's also, as a former really storage specific analysts. You know, the data protection part is really something that's critical because if it's lost, it's gone and the company loses all that stuff. So tell me a little bit about how Rewind operates tactically, and maybe could even shed some light on the important side, which is the recovery side. Yeah, I mean, one of our favorite quotes is backups are easy. Restores are hard, right? It's one thing to back it up, but you have to make sure that those backups are working. Our biggest value prop I'll give you two. Number one is going to be granular restores. So I talked about those database rollbacks that used to exist. We can get very granular. So it doesn't have to be the full instance that gets restored. You can actually pick individual item types. Whatever the data loss situation happens. Pick only that one item and get that back. Our second value prop is really around centralization. So we do things like Jira, confluence, GitHub, Bitbucket, Monday.com. You can actually choose Rewind to back all those vendors up in one organization. So instead of having four different vendors for four different apps, we want to be your one source of truth for all things backup. All right. So if I have to get into a recovery situation, I can go to one place and get back, you know, multitudes of SaaS apps. Uh, how do you deal with the growing variation and variety of different SaaS APIs out there? Is that something you guys do, or do you have a marketplace? What happens there? Yeah. So we take on the development costs of building all these backup tools. One of our probably biggest advantages is what we've built, what's called the platform engine. The platform engine allows us to kind of build out these backup tools or these backup apps at a pace that's kind of unheard of or unseen in the market today. So we have these reusable components that we kind of plug into these different marketplaces so that we can release these SaaS critical backups for, for our customers when they ask for them. All right. So kind of on demand. You can produce these things relatively quickly. On demand is probably a little, uh, you know, that's ambitious, but it's a fairly short turnaround time. Yeah. Okay. So we're here at Rsac. Obviously there's themes here of cybersecurity. Uh, you know, I'm a storage guy. So data protection is familiar to me. But for security folks, what message would you give to the people at Rsac who might be on the security side of the fence a little bit more than maybe on the data protection side? Yeah, I would I would look into the shared responsibility model. Even people who work in the CISO role or that that, you know, GRC role don't necessarily understand the shared responsibility model as much as they could, understanding that, yes, it's in the cloud. Yes, the cloud provider has their their uptime requirements, but the data doesn't fall under that umbrella. So really reading the fine print of the shared responsibility model is probably our biggest message here today. And you're talking about with each SaaS vendor has has, is going to have one. And if you have 100 SaaS vendors, that's 100 models to try to understand or look through, right? That's exactly right. If you went to the agreement that you have with each one of your vendors, you'll see the shared responsibility model has its own section in different words and different legalese, explaining that exact fact that you don't necessarily rely on them to back your data up. Very cool. If someone wants to look at Rewind a little closer. If they start to recognize that they've got hundreds of SaaS apps and they don't have a handle on them. Obviously you have a website, but is there something specific, maybe for the security crowd you could point them at? Yeah. So Rewind.com is obviously our landing page. If for the more security minded people we have a great trust security Rewind. Com you can see all the kind of measures we take about. At the end of the day we're backing up people's data. They want to make sure that it's safe. Um, we lay out our security practices out in the open. We want vendors or companies to make the best decision with vendor selection. So we give them all of our protocols, all the security steps that we take to make sure that they understand how important it is to us. So security Rewind. Com for the more security focused Rewind. Com you'll find out everything about our different apps. Oh that's awesome. Uh, you know, you have SaaS apps. You know, you should be protecting them. You know, you should be securing them. You need to do something like Rewind. Take care folks.
