Comprehensive Backup Appliance and Software

Introducing Rubrik Data Protection for Blackbaud CRM

 

Rubrik_Logo.svg

 

In August 2020, Concourse added Rubrik as the central component for backups and data protection for Blackbaud CRM customers. Rubrik is an all-in-one appliance and software solution that protects and archives data.

All-In-One Backup Solution

Comprehensive Backup Features

Magic Quadrant Leader

Magic Quadrant Leader

Gartner named Rubrik a Leader in the 2020 Magic Quadrant for Data Center Backup and Recovery Solutions.

Always Encrypted

Always Encrypted

All data and metadata remain encrypted at rest.

Immutable Backups

Immutable

Once taken, a backup may never be altered.

Virtual Machine Backups

Virtual Machine

Snapshot backups of your virtual machines available from the Rubrik itself for quick recovery in a snap.

SQL Database

SQL Database

SQL database backups mounted in minutes for point-in-time data extract and analysis.

File and Folders

File System

Individual files and folders easily discovered and recovered from a backup.

Integration with Pure Storage

Integration with Pure Storage

Rubrik uses Pure Storage API for blazing fast backup speeds.

Forever Incremental

Forever Incremental

Once a full backup happens, every backup after that is incremental. Even for SQL.

No Backup Jobs

No Backup Jobs

Smart backup scheduling based upon custom SLA (Service Level Agreements) policies.

No Naked BAK

No Naked .BAK

Need a copy of a backup? Those are always encrypted too.
DBCC CheckDB

DBCC CheckDB

Scheduled DBCC CheckDB runs against your mounted SQL backups to verify both database integrity and validity of the backup.

Proof of Backups

Proof of Backups

SLA Reports generated by Rubik prove data protection enforcement.

Blackbaud CRM Data Protection Overview

Policy-based backup customized to your needs.  Typical backup policy featured below.

Virtual Machine

Virtual Machine

60 Days

Snapshot backups of your virtual machine servers may be powered on in a moment's notice to replace or supplement an existing server.

  • Daily and retained for 8 days.
  • Weekly and retained for 4 weeks.
  • Monthly and retained for 2 months.
SQL Database

SQL Database

2 Years

The OLTP database for Blackbaud CRM contains the core data for the system and thus gets a more comprehensive backup policy.
 
  • Daily and retained for 32 days.
  • Weekly and retained for 16 weeks.
  • Monthly and retained for 8 months.
  • Quarterly and retained for 4 quarters.
  • Yearly and retained for 2 years.
 In addition, SQL transaction log backups are taken every 15 minutes and retained for 1 week.
Files and Folders

File System

180 Days

Files and folders associated with each server get backed up and indexed individually and thus may be easily searched, recovered, and restored.
 
  • Daily and retained for 16 days.
  • Weekly and retained for 8 weeks.
  • Monthly and retained for 4 months.
  • Quarterly and retained for 2 quarters.

GDPR, Backups and the Right to Erasure

As explained in our Privacy Policy, Concourse follows the EU - U.S. Privacy Shield Framework and the Swiss – U.S. Privacy Shield Framework. The European Commission recognizes Privacy Shield as a mechanism by which U.S. companies can comply with data protection requirements of the European Union and Switzerland - namely the EU's General Data Protection Requirement or GDPR.

If you're a Concourse-hosted organization that adheres to GDPR, you may encounter situations where a donor, prospective donor, or other user files a request to be removed from your Blackbaud CRM database. The decision to archive or delete such data is your decision alone and one in which Concourse plays no role nor has any knowledge of.

However, be aware that copies of user data remain in Concourse-controlled backups of your Blackbaud CRM database for up to two years. Concourse-controlled backups are immutable. In other words, it is impossible to delete data specific to a user or group of users from a backup. The only way to erase user data from a Concourse-controlled backup would be to permanently delete the entire backup.

Therefore, your organization should be aware that your own privacy policy with respect to the right to erasure requirement of GDPR should take into account user data contained within Concourse-controlled backups.

Concourse will, upon request from an authorized representative of your organization, delete any Concourse-controlled data backups you wish in order to facilitate your compliance needs. Concourse will provide a written letter verifying the deletion of such Concourse-controlled data backups.

What about backup copies for Blackbaud?

Occasionally Blackbaud may ask for a copy of your Blackbaud CRM database for troubleshooting purposes or your team may wish to have a copy of the database for internal needs. Once an authorized person from your organization approves a backup copy, we begin the process of constructing a secure backup package.

The secure backup package consists of a copy of your Blackbaud CRM database compressed and encrypted with SQL Sever built-in encryption using the AES-256 algorithm and a certificate protected with a one-time random 32-character key. Once constructed, this secure backup package may be downloaded from our secure FTP server. Alternatively, it may be uploaded to Blackbaud directly.

The one-time key is shared as a separate out-of-band note and may only be viewed once. After this single viewing, the note containing the key is shredded and may not be viewed again.

Concourse does not generate unencrypted .bak files. At no point would any SQL database backup generated by Concourse exist in a "naked" unencrypted state.

Thinking of switching hosting?