synology google backup sign off

[5nowman]

Hi

 

Hope you are all well.

 

I just found out you can sync folders in synology to the cloud! specifically Google Drive?

 

Before this is done..

1. Are you all ok storing files to Google Drive? e.g. say sims and FMS SQL databases?

2. Did you need to get anything signed off regarding GDPR?

3.Can anyone give any advice on the above? e.g rsync to google drive - encryption?  is it safe? uk data laws allow it to be ok?

 

Any thoughts welcome.

 

 

Thank you..

 

Kind regards

 

5nowman

 

[synaesthesia]

A DPIA would go without saying when you involve your MIS and finance databases. Yes it's legal, it's probably only slightly less safe than proper backup methods but I wouldn't recommend it unless it's a one-off or a backup of a backup. However, ESS's recent actions make doing that a little bit of a grey area - yes you're backing up your data, yes you have an active license with ESS, but are *they* happy for their "proprietary" data formats to be sent to Google for storage instead of a compliant backup solution?

[5nowman]

16 hours ago, synaesthesia said:

A DPIA would go without saying when you involve your MIS and finance databases. Yes it's legal, it's probably only slightly less safe than proper backup methods but I wouldn't recommend it unless it's a one-off or a backup of a backup. However, ESS's recent actions make doing that a little bit of a grey area - yes you're backing up your data, yes you have an active license with ESS, but are *they* happy for their "proprietary" data formats to be sent to Google for storage instead of a compliant backup solution?

This is a good answer and thank you for taking the time out.

I was thinking of a weekly SQL offsite backup along with all data from the school to google drive on the school domain.

The school do have an active ESS license.

 

I was thinking about a possible GDPR fiasco...  What do ESS recomment as a compliant backup solution?

[synaesthesia]

They shouldn't have any qualms with anything like Redstor or Veeam to online suppositories and the relevant encryption. To be honest they probably wouldn't give two hoots if you stored the backup on your personal My Drive, that bit was more aimed at general data security. As long as it's only ever accessible via methods using MFA I can't see it being an issue, but at least with the proper backup solutions you have guarantees about the services and SLAs covering both parties should something nasty happen. If a human error was to occur granting someone access to those backups on a google drive shared area, you'd pretty much be on your own.

[dhicks]

Synology: we have our Synology box sync backups to Backblaze - it syncs our local backups (from Veeam, which backs up our (few) local server VMs) and also backs up Google Drive (all shared and user drives). Other similar services are available (generally Amazon S3 compatible), around £5 per TB per month, and you can generally choose a UK-based storage location.

 

3 hours ago, synaesthesia said:

online suppositories

 

Er... repositories, maybe?

[synaesthesia]

EEK! Yes, why on EARTH... Perhaps because SIMS is involved, subconsciously many of us would like to tell ESS where to stick their products so maybe that was on the mind!

[Davit2005]

Personally I would not backup to anything but an encrypted location with Synology Active Backup you can do this. Personally I use an S3 bucket for my home network.

 

But obviously you need to check if this is GDPR compliant etc. as storing others personal info and financial info.

[5nowman]

7 hours ago, Davit2005 said:

Personally I would not backup to anything but an encrypted location with Synology Active Backup you can do this. Personally I use an S3 bucket for my home network.

 

But obviously you need to check if this is GDPR compliant etc. as storing others personal info and financial info.

What are people using which is GDPR compliant? I just want a full backup offsite say 2tb including  daily SQL backups offsite. If the school loses 1 weeks of data after a disaster has happened that will be acceptable I think!

 

[dhicks]

10 minutes ago, 5nowman said:

What are people using which is GDPR compliant?

 

We use Veeam to back up our local server VMs to local backup storage (you could use part of your Synology device for that), then we have those Veeam backups synced to Backblaze. We use Veeam to do that, but you could have the Synology device handle the sync-to-remote bit if you wanted. 2TB would cost around £10 a month, although with a few synthetic backups to give you more restore points it would probably be a bit more, I'd guess still under £30 a month. We also use one of the apps on the Synology device to backup our whole Google Drive, I think it scans for changes around every half hour.