Every email, every file. Recoverable.

Enterprise-grade, automated backup & recovery for Google Workspace — Gmail, Drive, Calendar, Contacts, Shared Drives. Domain-wide, incremental forever, restorable per user or globally.

Gmail · DriveCalendar · ContactsShared DrivesIncremental foreverEU-hosted

Why CYBBACK

Google's 30-day window is not a backup strategy

Incremental forever

Gmail history IDs, Drive page tokens, Calendar/Contacts sync tokens. After the first run, only deltas are fetched.

Domain-wide protection

Back up every user, every Shared Drive, every OU — at scale. Add a new user, and they're protected on the next run.

Granular restore

Recover a single email, a single file, a folder hierarchy, a user's whole Drive — into the original mailbox or another one.

AES-256-GCM encryption

Service account credentials and backup files encrypted at rest. Master key never leaves Google Secret Manager (EU).

Bring Your Own Bucket

Store backups on your S3-compatible storage (AWS, GCS, Scaleway, OVH…). Your data, your provider, your region.

Native exports

Download EML, MBOX, ICS, VCF — and Drive files in their original format — for legal hold, e-discovery or offline archive.

What gets backed up

Every Google Workspace surface area

GmailMessages, attachments, labels, threads

Drive (My Drive)Files, folders, native Google Docs/Sheets/Slides

Shared DrivesDomain-level shared content with permissions

CalendarEvents, recurring rules, attendees, attachments

ContactsPersonal & "Other contacts" with custom fields

Users & OUsCherry-pick users, whole OUs or groups

File metadataPermissions, owners, MIME types, revisions

Domain settingsAliases, groups membership snapshots

Technical specifications

Production-grade architecture

Authentication	Google service account with domain-wide delegation — JSON key encrypted in CYBBACK vault
APIs used	Gmail API · Drive API v3 · Calendar API · People API · Admin SDK Directory API
Backup mode	Incremental forever via per-user/service sync state (history_id, page_token, sync_token, delta_link)
Frequency	Manual, daily, weekly, or custom cron expression
Storage backend	Default: CYBBACK secure storage (EU). Optional: BYOB — any S3-compatible provider
Encryption at rest	AES-256-GCM, optional per-user toggle. Manifest excluded from encryption
Storage layout	Persistent catalogs & immutable pools. Drive files deduplicated. Gmail messages chunked (~100 per pool file)
Restore granularity	Service · user · folder · single message/file/event
Restore options	Dry-run · overwrite · prefix · redirect (alternate user, folder)
Native exports	EML, MBOX (Gmail) · original format or Office (Drive) · ICS (Calendar) · VCF (Contacts) — packaged as ZIP
Drift detection	3 severity levels (info / warning / critical). Threshold: 10% deletion + min. 5 objects (configurable)
Notifications	In-app · email · Slack · webhooks
Hosting region	Google Cloud — europe-west1 (Belgium)

Trust & compliance

Security you can prove

GDPR-alignedEU residency, DPA on request

AES-256-GCMIndustry-standard encryption

Audit logsEvery action is traceable

EU hostingBelgium (europe-west1)

Start your free trial

Connect your Google Workspace domain in under 10 minutes and run your first secured backup today.

Start free trial