Backup for your cloud apps, servers, and databases
Whatever gets deleted, you can get back
A departing employee empties their Drive. An integration overwrites half your Salesforce accounts. Ransomware encrypts a shared folder. The platforms you rely on keep running through all of it, but none of them keep a copy you can go back to.
Afi backs up Google Workspace, Microsoft 365, Salesforce, and your servers in AWS, Azure, and Kubernetes, automatically and as often as several times a day. When something goes wrong, you pick the moment before it happened and put things back. We run it for you.
Afi partner
We set it up, choose the retention rules, and keep an eye on backup health, so you get the protection without another console to check.
Protection overview
6 sources, last 24 hours
-
Google Workspace
48 users, 12 shared drives
Last backup
11:02 AM
-
Microsoft 365
31 mailboxes, 9 SharePoint sites
Last backup
10:47 AM
-
Salesforce
Production org, 184k records
Last backup
11:15 AM
-
AWS
6 EC2 instances, 2 RDS databases
Last backup
6:00 AM
-
Azure
4 virtual machines, 3 file shares
Last backup
6:00 AM
-
Kubernetes
2 clusters, 14 namespaces
Last backup
5:30 AM
Unusual encryption activity on 1 OneDrive account. Backup taken before it spread. Last clean snapshot marked at 9:12 AM.
Six platforms, one place to recover from
-
Google Workspace
-
Microsoft 365
-
Salesforce
-
Amazon Web Services
-
Microsoft Azure
-
Kubernetes
The shared responsibility model
Your cloud providers keep things running. Keeping a copy is on you.
Google, Microsoft, Salesforce, AWS, and Azure all work on a shared responsibility model: they protect the platform, you protect your data. Replication is built for uptime, so when something is deleted or encrypted, the damage replicates too.
What the platform handles
- Keeps the service online when their hardware fails
- Recycle bins that empty themselves after a few weeks
- Syncs a deletion or an encrypted file everywhere, instantly
- Restores that are slow, all or nothing, or a support ticket away
- Leaves keeping a copy of your data to you
What Afi adds
- Keeps every version for as long as you choose, forever by default
- Spots ransomware and takes a backup before it spreads
- Brings back one email, one record, or a whole server
- Lets you pick the exact moment to restore from
- Stores backups outside your account, where an intruder can't reach them
Everything your business runs on, in one place
One console for the apps your team works in every day and the servers and databases running behind them. Same search, same recovery, same safeguards across all six.
Where your team works
Google Workspace
Mail, files, and the structure around them, restored the way they were.
- Gmail, with labels and threads intact
- Drive and shared drives, with sharing permissions and document IDs
- Calendar, Contacts, and Google Chat
- Directory users, groups, and organizational units
- Google Classroom classes, assignments, and submissions
Microsoft 365
Far more than mailboxes, including the settings that keep your tenant secure.
- Exchange mailboxes, including shared, room, and online archive
- OneDrive, OneNote, and SharePoint sites with permissions
- Teams channels (including private and shared), chats, and Planner
- Entra ID, conditional access, and Intune policies
- Power BI, Power Apps, Power Automate, and Copilot chats
Salesforce
Customer records with their relationships, not just a pile of rows.
- Standard and custom objects like Accounts, Opportunities, and Cases
- Files, attachments, and notes linked to the right records
- A changes view that shows exactly what was added, edited, or removed
- Recovery that rebuilds parent and child relationships
- Restore into a sandbox to investigate without touching production
Where your systems run
Amazon Web Services
Servers and databases, recoverable down to a single file or table.
- EC2 instances running Windows, Linux, or macOS
- RDS and Aurora PostgreSQL databases
- RDS for SQL Server databases
- Browse and download files inside a server backup
- Restore with a new subnet, key pair, or encryption settings
Microsoft Azure
Virtual machines, databases, and file shares from one console.
- Windows and Linux VMs, including BitLocker-encrypted disks
- Azure SQL databases across every service tier
- Azure Database for PostgreSQL
- Azure Files (SMB and NFS) with permissions preserved
- Restore to a different subscription, resource group, or region
Kubernetes
Whole applications, configuration and data together.
- Cluster and namespace configuration, including custom resources
- Persistent volume data through CSI snapshots
- Restore to the same namespace, a new one, or another cluster
- Runs on EKS, AKS, GKE, or your own hardware
- Export any application's objects as YAML
Beyond email and files
The things you'd only miss once they're gone
Plenty of backup tools stop at mailboxes and drives. A lot of what your business depends on lives somewhere else.
The work your team did with Copilot
Prompts and replies from Copilot chats, including Copilot inside Outlook and Word, are backed up, searchable, and exportable.
The settings that keep you secure
Conditional access policies, Intune compliance and configuration profiles, and BitLocker recovery keys. Rebuilding those from memory after a mistake is nobody's idea of a good week.
The reports and automations you built
Power BI reports and dashboards, Power Apps, and Power Automate flows, exported in Microsoft's own formats so they import straight back in.
Customer history, connections included
When an integration overwrites a few hundred Salesforce accounts, Afi finds what changed and puts it back with the related contacts, files, and opportunities still attached.
Conversations, not just files
Teams channels (private and shared included), Teams and Google chats, and Planner tasks. The decisions your team made in chat are recoverable too.
Everything a departing employee leaves behind
Delete their Google or Microsoft account to stop paying for the seat. Afi keeps their backup indefinitely at no extra license cost, ready to hand to whoever takes over.
Search and recovery
Find it, check it, put it back
A backup is only as good as how fast you can get something out of it. Afi searches across all of your backups at once, so "that contract someone deleted last spring" is a search, not a project.
- Search inside emails and documents, not just subject lines and file names
- Preview anything before you restore it
- Pick any backup, from this morning or three years ago
- Restore to the original spot or to someone else's account
- Export to PST, MBOX, CSV, and other standard formats
- Let employees restore their own files, if you want them to
3 results across Gmail, Drive, and Chat
- Email Restore
RE: Brightline renewal, signed copy attached
jordan@yourcompany.com, Mar 14, 2024
...the countersigned Brightline agreement with the updated renewal terms...
- File Restore
Brightline MSA 2024 (final).pdf
Shared drive: Contracts, 6 versions
Deleted Oct 2 by alex@yourcompany.com
- Chat Restore
Finance team space
Google Chat, Sep 30, 2026
Does anyone have the signed Brightline renewal? It's not in the shared drive anymore.
Security and compliance
Backups that survive a bad day
Attackers go after backups first, because a company that can't recover is a company that pays. Afi is built so a compromised account can't take your safety net with it.
Backups that can't be rewritten
Afi stores backups in an immutable format. Once written, data can't be modified or encrypted, even by someone with your admin password.
Ransomware caught early
Afi watches for encryption activity, takes a backup before it spreads, and marks your last clean snapshot so you know exactly where to restore from.
Lockdown mode
Deleting backups, shortening retention, or changing access requires a separate secret code kept outside Google and Microsoft. A stolen admin login isn't enough.
Deletions you can take back
Backup deletions are delayed and trigger an alert, so there's time to cancel one that shouldn't be happening.
Your keys, if you want them
Data is encrypted in transit and at rest. Bring your own key through AWS KMS, Azure Key Vault, or Google Cloud KMS for full control.
A record of every restore
Every export, restore, and settings change is logged and kept for three years. Afi's own staff have no access to your backup data.
- SOC 2 Type II
- HIPAA (BAA available)
- GDPR
- CCPA
- FERPA
Stored in your choice of the US, Canada, UK, Netherlands, Germany, Switzerland, or Australia
You get the safety net, not another console
Afi does the backing up. We make sure it's set up for how your business works and that someone is paying attention to it.
We set it up and tune it
We connect each platform, set backup schedules and retention that fit your business, and turn on lockdown mode once everything is in place.
We keep an eye on it
Afi retries failed backups automatically around the clock. We review backup health and alerts during business hours and follow up on anything that needs a person.
We get things back
Need a deleted folder, an old mailbox, or yesterday's server? Ask us and we handle the restore, or we'll set up self-service so your team can do it themselves.
We walk you through it
When setup is done, we walk you through what's protected, how long it's kept, and how recovery works.
Frequently asked questions
Want to talk?
Had a close call with lost data, not sure what's actually protected across your cloud apps and servers, or just want to stop wondering? We can help you figure out what makes sense.