NOC staffed 24 hours a day, every day of the year.

Service · Backup as a Service (BaaS)

Managed backup with monthly test restores.

Managed Backup as a Service on Veeam, NAKIVO, Commvault, AFI Backup and Commvault M365. ModernOps monitors the jobs around the clock, runs a documented test restore every month, and adds offsite or air-gap copies where the contract calls for them.

How it works
Test restores
Monthly
Job monitoring
24×7
SLA trigger
2 failures
What is BaaS

Backup as
a managed
service.

ModernOps designs the backup strategy, deploys and configures the jobs, monitors their health, runs the test restores, manages offsite and air-gap copies, and produces the reporting your auditors ask for. Your team keeps ownership of the data and approves every restore.

Backup as a Service (BaaS) is a managed model for protecting and recovering data. In many of the environments we inherit, a backup product was bought and configured once, then left to run unattended. BaaS replaces that arrangement with monitored jobs and a documented test restore behind each recovery point.

The design starts from each customer's workload list and retention requirements, and the service covers deployment, monitoring, reporting and restore operations from there.

Platforms include Veeam, NAKIVO, Commvault, AFI Backup, and Commvault M365, plus platform-native backup in ModernOps-hosted Proxmox VE and Proxmox Backup Server environments.

Each workload is assigned a platform and a retention policy, and the policy is verified every month by a documented test restore.

Who this is for

Built for the
teams that own
the recovery.

Four roles usually take part in a backup decision, and each one needs different evidence from the service.

01 / Executive
CIO &
VP of IT
Confidence that business-critical systems can be recovered, that backup status is reportable, and that recovery responsibilities are clear.
02 / Architecture
Infrastructure
Architect / Manager
Backup coverage across VMs, hypervisors, physical servers, repositories, storage, and cloud-connected environments.
03 / Operations
IT Ops &
Service-Desk Lead
Backup alerts, incident response, restore ticket workflows, monthly reports, and clear escalation paths.
04 / Risk
Security,
Risk & Compliance
Encryption, retention evidence, backup audit reporting, air-gap or immutable copy options, and proof restores are tested.
What we hear

Common
concerns,
addressed.

These are the concerns we hear most often in a first call, with the operating commitment that answers each one.

We have no complete list of what is protected.
Onboarding starts with inventory. Scope is confirmed across VMs, physical servers, M365, databases, and file shares before a single job is configured.
Backups run, but failed jobs sit for days before anyone looks.
Job health is monitored 24/7. Failures are responded to per SLA; two consecutive failures are SLA-impacting.
We have no evidence that a restore would work.
Test restores are conducted during onboarding and monthly to verify backups are complete and recoverable, with documented results.
Microsoft 365 retention policies fall short of what we need.
Exchange Online, SharePoint, OneDrive, and Teams are protected through AFI Backup or Commvault M365 with OAuth or service-account access.
Ransomware could compromise both production and backups.
Offsite or air-gap copy is supported where contracted, including Commvault Air Gap Protect and cloud tiering. Backups are encrypted in transit and at rest.
Restore requests arrive with no clear owner.
A defined RACI covers onboarding, M365 backup operations, VM restore operations, reporting, escalation, emergency restore handling, and customer authorization.
We have different platforms across sites.
Veeam, NAKIVO, and Commvault are deployed by environment and licensing, with M365 delivered through AFI Backup or Commvault M365.
We need reporting for leadership and audits.
Monthly or quarterly status reports cover coverage, retention, RPO/RTO, and SLA compliance.
How we deliver

How the backup service runs each month.

Monitoring, alerting, compliance reporting, consumption tracking, license management and restore validation run on a published schedule, and each has an owner in the RACI.

01
Stand up
Configure to the SOW
Scope is confirmed and the platform selected. Repositories are deployed or validated, and jobs are configured per workload with schedules and retention aligned to the SOW. Once job-health alerting is enabled and the initial backups have run, at least one workload per category is test-restored, a Backup Configuration Summary is delivered, and monthly health reporting is scheduled.
02
Restore
Ticket-driven recovery
Restore requests come in through ticketing. ModernOps manages VM restore execution with customer authorization, supports M365 self-service where applicable, monitors and reports on bulk restore progress, validates data integrity after restore, and escalates technical issues to vendor support when required.
03
Operate
Run as a service
Monitoring, alerting, compliance reporting, capacity and consumption tracking, license management, offsite and air-gap copy management, and documented restore validation recur on the service calendar rather than waiting for an audit.
What changes

Before
& after.

Your backup jobs on day one, and after handover.

Before
Jobs configured once,
with no owner
for restores.

Backup operations depend on whoever set up the tool, jobs were configured ad hoc, restore responsibility is unclear, reporting is inconsistent, and there is little evidence that a restore would succeed.

After · with ModernOps
Confirmed scope,
monthly test restores,
a named owner.

Scope is confirmed and platforms are matched to workloads. Jobs are configured per the SOW with health alerting, monthly test restores document recoverability, and a Backup Configuration Summary plus RACI set out who does what across ModernOps, the customer and the vendor.

Side by side

Legacy backup
vs. ModernOps BaaS.

Seven points where the operating model differs.

Dimension Legacy approach ModernOps BaaS
Scope Coverage assumed or inherited. Confirmed across VMs, physical servers, M365, databases, file shares.
Platform strategy One tool forced everywhere. Veeam, NAKIVO, Commvault, AFI, or Commvault M365, chosen by environment.
Monitoring Failures discovered late. Job health monitored; failure / warning notifications configured.
Restore confidence Rarely tested. Onboarding test restore + monthly test restores.
Reporting Manual or tool-specific. Scheduled monthly health reports + coverage / retention / RPO / RTO / SLA.
Risk posture Backups in same risk domain as production. Offsite / air-gap copies; encryption in transit and at rest.
Ownership Customer / MSP / vendor unclear. RACI across onboarding, ops, restore, reporting, support, governance, licensing.
What you get

Six outcomes written into the BaaS SOW.

Each one has a named deliverable you can check us against.

Prove recoverability
Monthly test restores and documented validation, with the Backup Configuration Summary as the source of truth.
Cover the real environment
Scoped VMs, physical servers, Microsoft 365, databases, and file shares, confirmed during onboarding.
Match platform to workload
Veeam, NAKIVO, Commvault, AFI Backup, and Commvault M365 deployed by environment and licensing.
Monitor every job
Job health monitored, failures alerted, coverage and retention reported on a monthly cadence.
Recover through workflow
Ticketed restore requests, VM restore control, customer authorization, vendor escalation when needed.
Protect against modern risk
Encrypted backups, offsite or air-gap copy where contracted, and compliance-ready reporting.
Operating flow

From backup job
to proven
recovery point.

Every workload streams to the backup repository on a schedule. Failures route to the operations queue, monthly test restores prove recoverability, and each successful recovery point is logged with an immutable retention tag.

Platforms & workloads

The right tool
for the workload.

We choose from a short list of platforms and protection options, matched to the workload, then operate them as one service.

Backup platform
Veeam
Backup platform
NAKIVO
Backup platform
Commvault
Backup platform
Proxmox VE + Backup Server
M365 backup
AFI Backup
M365 backup
Commvault M365
Air gap
Commvault AGP
Tier
Cloud Tiering
Workloads
VMs, physical servers, Microsoft 365 (Exchange Online, SharePoint, OneDrive, Teams), databases, file shares, endpoints, SaaS storage, cloud workloads.
Protection options
Encryption in transit and at rest, offsite copy, air-gap (Commvault Air Gap Protect), cloud tiering, immutable backups, ransomware-aware recovery (Veeam Secure Restore, NAKIVO ransomware protection).
Operations
24/7 job monitoring, monthly test restores, scheduled monthly health reporting, ticket-driven restore workflows.
Reference Architecture · Multi-Vendor Stack
SOURCE
Layer 1
VMs
VMware · Hyper-V · Proxmox VE
Physical
Windows · Linux
M365
Exch · SP · OD · Teams
PLATFORM
Layer 2
Veeam
VM & physical
NAKIVO
VM & backup repo
Commvault
Enterprise scale
M365 BACKUP
Layer 3
AFI Backup
SaaS backup
Commvault M365
Tenant scale
OAuth / Svc Acct
Tenant access
PROTECTION
Layer 4
Encryption
Transit + at rest
Air Gap
Commvault AGP
Cloud Tier
Immutable copies
OPERATE
Layer 5
24/7 Monitor
Job health
Test Restore
Monthly
Reporting
SLA · RPO · RTO
Proof points

Service metrics
& coverage.

Representative figures from current engagements.

Test Restore Cadence
MonthlyPlus onboarding restore
Encryption
In Transit
+ At RestSLA-aligned
SLA Failure Threshold
2consecutive backup failures
Managed MRR Growth · 2025
117.5%Year over year
Backup job monitoring
24×7Proactive job + failure alerting
Air-gap copy protected
50 TBRansomware-isolated backup
Representative Commvault Scope
42VMs · 185 M365 · 4 TB SaaS · 50 TB AGP · 30 endpoints
Operating Posture
SOC 2Aligned · principal service commitment
Onboarding · 30 days

Thirty days
from scope
to handoff.

Three phases over thirty days take a customer from an undocumented backup estate to a managed engagement with a Backup Configuration Summary and test-restore evidence.

Days 0 – 10
Assess
Confirm + Inventory
  • Confirm backup platform and licensing.
  • Validate scope across VMs, physical servers, M365, databases, file shares.
  • Collect M365 tenant details (OAuth or service account).
Days 10 – 20
Implement
Deploy + Configure
  • Deploy or configure platform and repository if needed.
  • Configure jobs per workload; apply SOW-aligned schedules and retention.
  • Configure offsite or air-gap copy if contracted.
  • Run initial backup pass and validate.
Days 20 – 30
Optimize
Validate + Hand off
  • Configure backup job health alerting.
  • Conduct test restores and document results.
  • Deliver Backup Configuration Summary.
  • Schedule monthly backup health report cadence.
Why ModernOps

Why teams move backup to ModernOps.

BaaS is integrated with the rest of the ModernOps managed portfolio (Server, Storage, Observability, DR, Patching and Hosted Platform), so a backup alert reaches the same NOC that watches the servers.

01
Multi-vendor delivery
Veeam, NAKIVO, Commvault, AFI Backup, and Commvault M365, operated as one service.
02
Workload breadth
Servers, VMs, physical, M365, databases, file shares, endpoints, SaaS storage, cloud.
03
Restore validation built in
Onboarding and monthly test restores are SLA obligations.
04
Clear operational ownership
RACI across operations, restore, monitoring, reporting, incident response, governance, licensing.
05
Air-gap and offsite
Commvault Air Gap Protect and cloud tier use cases supported where contracted.
06
Integrated managed services
Linked to Server, Storage, Observability, DR, Patching, and Hosted Platform workflows.
07
Compliance-ready reporting
Backup status, coverage, retention, SLA / RPO / RTO tracking.
08
SOC 2-aligned posture
BaaS is a principal service commitment in our SOC 2 reporting.
FAQ

Frequently
asked
questions.

Twelve answers to the questions that come up in a first call.

01 /What platforms does ModernOps support for Backup Management?+
Veeam, NAKIVO, and Commvault depending on environment and licensing, with M365 backup through AFI Backup or Commvault M365.
02 /What workloads can be protected?+
VMs, physical servers, M365 workloads, databases, file shares, endpoints, SaaS storage, and cloud workloads, depending on SOW and platform.
03 /Does ModernOps handle Microsoft 365 backup?+
Yes. M365 scope can include Exchange Online, SharePoint, OneDrive, and Teams, with tenant access via OAuth consent or a service account.
04 /Who requests and authorizes restores?+
Customers authorize VM restore requests; ModernOps performs VM restore execution. M365 self-service restore allows customers to restore mailbox items, files, and Teams data without ModernOps intervention.
05 /How often are restores tested?+
Monthly. A customer-requested restore during the month counts as that month's test.
06 /What happens if a backup fails?+
ModernOps monitors backup processes, notifies the client, and treats two consecutive backup failures as an SLA violation under current SLA language.
07 /Is backup data encrypted?+
Yes. Encrypted in transit and at rest.
08 /Can ModernOps support air-gapped or offsite backup copies?+
Yes, where contracted, including Commvault Air Gap Protect and cloud tier use cases.
09 /What reporting is included?+
Monthly backup health reports plus reporting on coverage, retention, completion, compliance, RPO/RTO, SLA compliance, infrastructure health, capacity, and cost / license usage.
10 /What does onboarding include?+
Confirming platform and licensing, confirming backup scope, collecting M365 tenant info, deploying / configuring platform and repository, configuring jobs, validating first backup pass, enabling alerts, conducting test restores, documenting results, delivering the Backup Configuration Summary, and scheduling monthly reporting.
11 /How does Backup Management relate to DRaaS?+
BaaS protects and validates recoverable data. DRaaS focuses on disaster recovery testing, recovery environment activation, system availability, remote access for validation, and return-to-primary workflows.
12 /Can customers bring existing backup tools?+
Yes. Onboarding starts by confirming the backup platform and licensing tier from the SOW. From there, ModernOps can run a new platform or the one you already have, where that makes sense.
Get started

Start with a
recoverability
assessment.

ModernOps will review your protected workloads, backup platforms, retention requirements, restore process, offsite or air-gap needs, reporting and current restore evidence, then map a path to managed coverage, monitoring, test restores and recovery workflows.

Two minutes of fields · Replied to within 1 business hour · No obligation

Or call 484-429-9328 and skip the form entirely

Prefer to start smaller? Try one of our complimentary assessments