Your first secured Google Workspace backup
in under 15 minutes.

CYBBACK offers two ways to get started. Both unlock the full Google Workspace feature set.

Option A — Free trial

1. Open cybback.com/essai-gratuit.
2. Fill in your work email, company and a password. Click Start free trial.
3. Confirm via the verification email.
4. On the trial selection screen, pick Google Workspace. Your trial workspace is provisioned instantly.

Option B — Paid licence (Stripe checkout)

1. Go to cybback.com/tarifs and pick the Google Workspace plan that matches your seat count.
2. Click Subscribe. Stripe Checkout supports cards, SEPA and invoicing on annual plans.
3. Your licence is active immediately — visible under Account → Subscription.

CYBBACK reads your domain through a Google service account with domain-wide delegation (DWD). It impersonates each user only to fetch their own data — read-only by default.

1. Create the service account

1. Open console.cloud.google.com. Create or select a project for CYBBACK.
2. Enable these APIs: Gmail API, Drive API, Calendar API, People API, Admin SDK API.
3. Go to IAM & Admin → Service Accounts → + Create service account. Name it cybback-backup.
4. Skip the role assignment. Click Done.
5. Open the new service account → Keys → Add key → JSON. Save the downloaded file safely — this is your credential.

2. Enable domain-wide delegation

1. In the same service account, click Show domain-wide delegation and toggle it ON.
2. Note the OAuth Client ID displayed (a 21-digit number).

3. Authorize scopes in Google Workspace Admin

1. Open admin.google.com as a Super Admin.
2. Go to Security → Access and data control → API controls → Manage Domain Wide Delegation.
3. Click + Add new. Paste the OAuth Client ID. In OAuth scopes, paste:

Click Authorize. Allow ~5 minutes for propagation across Google's infrastructure.

4. Paste credentials into CYBBACK

1. Open app.cybback.com/dashboard/gworkspace-backup → Settings.
2. Paste the entire JSON service account key in the Credentials field.
3. Provide the admin email (a Super Admin in your domain — used for impersonation only on the Admin SDK).
4. Click Save credentials. CYBBACK lists your users on success.

Backup files are stored on CYBBACK's secure EU infrastructure by default. Add a second layer with client-side encryption: each file is encrypted before it leaves the worker.

1. On the Settings tab of the Google Workspace page, scroll to Security options.
2. Toggle AES-256 Encryption ON.
3. Click Save. Applies to new backups; previous backups remain readable.

Want full data sovereignty? Point CYBBACK at your S3-compatible bucket — AWS S3, GCS, Scaleway, OVH, Wasabi, MinIO. Your data, your provider, your region.

Provision the bucket

1. In your S3 provider, create a private bucket (no public access, versioning recommended).
2. Create an access key / secret key with permissions limited to that bucket.
3. Note your endpoint URL and region.

Configure CYBBACK

1. Open Dashboard → Storage.
2. Select My own S3 storage.
3. Fill the form, click Test connection, then Save.

• Required IAM actions: PutObject, GetObject, DeleteObject, ListBucket.
• Resilience: CYBBACK stores an encrypted snapshot of S3 credentials with each backup. Old backups remain restorable even after you switch providers.

You're now fully configured. Time to run your first Google Workspace backup — manually for instant peace of mind, then schedule recurring runs.

Pick the user scope

1. On the Dashboard tab, choose between: All users, Specific OUs, Specific groups, or Manual user selection.
2. Optionally exclude shared mailboxes or service accounts.

Manual backup

1. Click Run backup now. The job appears with status pending, then running.
2. Progress is streamed live: users processed, services fetched (Gmail / Drive / Calendar / Contacts), files uploaded.

Schedule automatic backups

1. From Dashboard → Schedules, click New schedule.
2. Service: Google Workspace. Frequency: Daily / Weekly / Custom (cron).
3. Pick a low-activity window (e.g. 02:00 UTC) and click Save.

Track your backups

• Real-time: the Events page streams every operation across all services via SSE.
• Notifications: success / failure / drift alerts via email, Slack and webhooks.
• Drift detection: alerts when an unusual number of files or messages disappear between runs — perfect to catch accidental mass deletions or rogue scripts.

CYBBACK restores from any previous backup. Pick a single email, a single file, a folder, a whole user — and write it back to the original mailbox or to a different one.

The 3-step restore flow

1. Selection. Open the backup, browse users → services (Gmail, Drive, Calendar, Contacts) → folders → items. Search and lazy-loading let you scan large mailboxes smoothly.
2. Options. Choose your safety net:
   • Dry-run — simulate the restore, no API write.
   • Prefix — prepend a label/folder name (e.g. [restored]) to avoid clashes with live data.
   • Redirect — write into a different user's mailbox or a different Drive folder.
3. Execution. A worker picks up the job, restores in the background, reports progress in real-time. You can close the tab — completion is emailed.

Best practices

• Always start with a dry-run — especially when restoring into live mailboxes.
• Use the prefix option for partial restores. Users can review and move items back manually.
• Off-boarded users: restore their data into a shared mailbox before the account is fully purged from your domain.
• Native exports (EML, MBOX, ICS, VCF) are also available from the Export tab if you need a downloadable archive instead of a live restore.