Keeping Your Customer Data Backed Up and Secure

Why this matters

When you move your business onto cloud software, a quiet thing happens: the responsibility for your data does not go away, it gets split. The vendor now handles a big chunk of it, the servers, the security patches, the platform backups, and that is real value you could never match yourself. But some of it stays yours, and the parts that stay yours are exactly the parts shops assume someone else is handling. The day a customer's data leaks, or the day you cannot get into your account, "I thought the software company had that" is not an answer. Knowing the split is what keeps you from a false sense of safety.

The shared-responsibility split

"Cloud" means your data lives on a provider's servers, reached over the internet, instead of on a computer in your office. That arrangement divides the work. Get clear on which side each job sits.

The pattern: the vendor protects the platform from platform problems. You protect your account from people problems. Most breaches at a small shop are people problems.

Your side, kept short

The access and device basics are covered in depth elsewhere, so here is the short version and a pointer. See related: The Customer Data You Store: Protecting It.

• Individual logins, never a shared one, so you have a trail and a clean off-switch.
• Two-factor on anything that reaches customer data, which stops a stolen password cold.
• Cut access the day someone leaves. An ex-employee with a live login still holds your customers' addresses and gate codes.
• Lock every device that can open the app, and be able to wipe a lost one.

Those four handle most of the risk on your side of the line. Do not skip them because the software "feels secure."

The safety net the vendor does not give you: your own copy

Here is the part shops miss. Your data being in the cloud is not the same as you having a backup of it. If your account is locked, compromised, closed, or the vendor has a bad day, the data can be there and still out of your reach.

• Confirm you can export a full copy of your customers, jobs, and financials on demand, in a usable format. "It is in the cloud" is not a backup if you cannot get it out.
• Pull that export on a schedule and keep it somewhere you control. This is your off-site copy against a problem on the vendor's end. For the mechanics of a real backup rotation, see related: Backing Up Your Business Data.
• Test that the export actually opens and holds what you need. An export you have never checked is a guess.

The vendor backs up the platform against their failures. Your export protects you against losing access to the platform at all. Different risks, and only one of them is on them.

Vet the vendor before you trust them with it

You are handing a company every customer you have. Before and during, know a few things about how they treat it.

• Do they encrypt your data, in transit and at rest.
• What is their uptime and outage history, because their downtime is your downtime.
• Can you get your data out cleanly if you ever leave, which is both a security question and an anti-lock-in one.
• Have they had breaches, and how did they handle them. A clean track record and honest disclosure both matter.

A vendor who cannot answer these plainly is a risk you are taking blind.

Plan for the day you cannot get in

Dependence on a platform means planning for the platform being unavailable, whether that is an outage, a billing lapse, or a lockout.

• Know your paper or offline fallback for a day the app is down, so the crew can still work. See related: The Paper Backup When the App Is Down.
• Keep the recent export so a prolonged loss of access is a setback, not a catastrophe.
• Know your breach-notification duty in advance. If certain personal data is exposed, many states legally require you to notify affected customers, sometimes within a set window that depends on your state and the data involved. Know whether what you hold triggers it and who you would call.

The mental model to keep

Going digital does not outsource responsibility for your data, it splits it. The vendor guards the platform; you guard your account and keep your own copy. Individual logins with two-factor, access cut the day someone leaves, locked devices, a scheduled export you control, and a vendor you actually vetted. Hold up your half of the split and a cloud that fails or an account that locks becomes an inconvenience instead of the end of your customer list.

References

• Cybersecurity and Infrastructure Security Agency (CISA), data protection and cloud security guidance
• Federal Trade Commission (FTC), protecting personal information: a guide for business
• State data-breach notification laws (specific triggers and deadlines vary by state; consult local counsel)
• See related: The Customer Data You Store: Protecting It; Backing Up Your Business Data; The Paper Backup When the App Is Down