Artaa CRM Backup

Artaa CRM Backup is the backup integration of the Artaa Work Platform, the internal CRM and task-management system Artaa.Media uses to run its projects. It stores encrypted copies of the CRM in Google Drive, away from the server the CRM runs on, so the CRM can be restored if that server is lost.

It is an administrative tool, not a public product or a cloud-storage service. There is no sign-up, and it cannot be used to store anyone else’s files. Only administrators authorized by Artaa.Media configure and operate it, and it is connected only to a Google Drive account controlled by Artaa.Media’s owner.

Each backup is a complete restore point for the CRM:

• a snapshot of the CRM database;
• the files stored in the CRM, such as project files, briefs, request uploads and final deliverables;
• a checksum of every file and a recovery manifest, used to confirm that a restore is complete and unaltered.

The server’s configuration secrets are not part of the backup.

Every backup is encrypted with restic on the CRM’s server before anything is uploaded. Google Drive only ever receives encrypted data, and the password needed to read it is never sent to Google.

The encrypted backup is then uploaded with rclone to a dedicated folder that the integration creates in Google Drive, and data is read back from Google Drive to check that it arrived intact.

The integration asks Google for one permission only: https://www.googleapis.com/auth/drive.file. With it, an application can see and manage only the Google Drive files it creates itself.

It does not ask for full access to Google Drive. It cannot open, list or change the files that were already in that Drive or that people or other applications create, and it does not request access to Gmail, Google Contacts, Google Calendar or any other Google service.

When the connection is checked, the integration asks Google which permission was actually granted and to which application. A connection that grants anything other than drive.file, or that belongs to a different application, is rejected.

Google and Google Drive are trademarks of Google LLC. Artaa CRM Backup is not affiliated with or endorsed by Google.

Clients and talents can sign in to the Artaa.Media Client Portal and Talent Portal with Google. That sign-in is a different Google application with different permissions — openid, email and profile only — and it never requests Google Drive access. It is described in the Artaa.Media Privacy Policy at artaa.media/en/privacy.

Signing in to either portal never connects Artaa CRM Backup, and Artaa CRM Backup receives nothing from those sign-ins.

Already built:

• encryption of every backup before upload, and verification after it;
• the check that the Google authorization is exactly drive.file and belongs to this integration;
• a restore test that rebuilds the database in a throwaway copy and checks every file against its checksum. It has passed against a local test destination, not yet against Google Drive.

Pending:

• the Google Drive connection itself. Until an authorized administrator completes it, nothing has been uploaded to Google Drive and no Artaa CRM Backup data is stored there.

Artaa CRM Backup is operated by Artaa.Media. For any question about it, write to accounts@artaa.media, or use the contact page at artaa.media/en/contact.