Executive Summary

At first glance, Druva inSync and Code42 CrashPlan might seem similar, as both are designed for end-user data protection, provide flexible deployment options, license per-user and have some common features. However, inSync has several architectural advantages and integrated features, such as cloud application data collection & archival, proactive compliance, data loss prevention (DLP), file sharing, and data governance, which provide businesses with higher value at a lower total cost of ownership (TCO) than CrashPlan does.

Druva designed inSync as a unified end-user data protection, sharing, and governance solution that delivers the visibility and management needed for large enterprises. This approach enables organizations to benefit from the performance increases delivered by our unique global deduplication system, as well as minimize the data replication inherent with siloed solutions. Security and governance remain centralized, providing comprehensive audit trails, and the ability for legal hold across laptops, mobile devices, and cloud apps.

This report will compare the features of Code42 CrashPlan and Druva inSync across several different categories, including: data deduplication, device refresh & OS migration, legal hold & and eDiscovery, proactive compliance, security and data privacy, data availability and durability, and integrated file sync and share.

1. Why Switch from CrashPlan to inSync?

• inSync saves 80% in bandwidth and storage with global, application-aware, clientside deduplication.
• CrashPlan does not have the ability to globally deduplicate data across all users in an enterprise.
• CrashPlan’s dual-destination backups require twice the bandwidth as inSync.
• CrashPlan’s user profile backup for OS migration requires significant IT effort as well as limited support across device platforms.
• CrashPlan’s new legal hold capabilities are basic, using a classic backup model that requires IT/Legal to move the data to an intermediary preservation server. Moreover, CrashPlan’s legal hold capabilities allows Legal to customize the retention polices when creating a legal hold which violates Federal Rules of Civil Procedure (FRCP).
• CrashPlan does not backup mobile devices or containerize corporate data.
• CrashPlan’s datacenters are not ITAR, FISMA, ISAE3000, SOC-1 (SSAE 16/ISAE 3402) SOC-2 or SOC-3 certified.
• CrashPlan has no stated SLAs on data durability and availability.
• CrashPlan’s security options trade-off enterprise level data accessibility for security and privacy, opening a hole for data loss through lock-out.
• CrashPlan does not offer mobile smart device remote wipe capability for DLP to prevent data breaches.
• CrashPlan does not offer integrated file sharing, requiring organizations to purchase a separate file sharing solution.

2. Data Deduplication Techniques

CrashPlan

CrashPlan deduplicates only across data from a single device providing very limited bandwidth and storage savings.

• Variable-block based, byte level deduplication is not accurate at determining block boundaries (objects) to efficiently deduplicate objects within/across different file types
• The per-device model results in a single 100MB file, stored on 20 user’s devices being backed up 20 times, whereas global deduplication which will only store it once
• Without email awareness, a PST file must be assessed and backed-up every pass, resulting in a lot of wasted storage

inSync

inSync’s deduplication is global, application-aware, and client-side which results in 70-80% bandwidth and storage savings.

• inSync deduplicates data across all users/ devices in the enterprise
• Because of its application-aware nature, inSync provides optimal deduplication with Outlook, PDF, and Office files as it accurately determines block boundaries and can recognize objects within as well as across these file types
• inSync is far more efficient in backing up large PST files as it uses MAPI to deduplicate at the message/attachment level
• Bandwidth and storage savings mean less time spent in storage management, better end user experience, and lower TCO

Storage and bandwidth usage over time:

80%
LESS

inSync will use 17TB less storage and bandwidth (80% less) compared to traditional backup after 1 year of implementation.

3. Device Refresh & OS Migration

CrashPlan

Currently CrashPlan only supports backing up of Windows user profiles, and does not support OS X environments.

CrashPlan uses Microsoft’s User State Migration Tool (USMT) in migrating system settings and application data and requires .XML files to determine what is included in the profile backup. CrashPlan does not provide the default .XML files for USMT and requires users to supply/create them for profile backups to occur.

For the CrashPlan app to backup user profile data, USMT must be installed or deployed on each device backing up to the Code42 server, requiring additional work for IT admins.

4. Legal Hold & eDiscovery

CrashPlan

Overall CrashPlan’s legal hold capabilities are basic, using a classic backup model that requires IT/Legal to move the data to an intermediary preservation server. More advanced features such as full text search, investigative search and data culling, are notably absent from the product.

• CrashPlans legal hold web app allow Legal to customize the retention polices when creating a legal hold which violates Federal Rules of Civil Procedure (FRCP)
• No centralized access to data for a legal hold policy. IT or Legal needs to restore data for every user and users must restore files to a device (push restore)
• Because there is no centralized access to data for a legal hold this significantly increases the chances of spoilage and also does not retain metadata attributes for chain of custody reports
• No out-of-the-box connectors with any eDiscovery vendor
• No chain of custody reports
• Poor support for metadata attributes (Only support Creation date, Last modification date, Checksum, Full path, File size)
• Cannot scale for continuous investigations or cannot meet strict SLA’s for quick data access for certain litigations

inSync

Druva inSync is the only endpoint data protection platform that delivers the needed capabilities to locate custodian data, place legal holds and provide an interface for eDiscovery ECA system ingestion.

• With centralized access to endpoint data, organizations can use inSync’s federated search to identify the location of files — on which device they are stored, as well as the geographic location of the device itself.
• After identifying custodians via federated search or list import, organizations can place legal holds on stored data, suspending retention policies and preserving the content in place — ensuring it remains securely stored and immutable until it needs to be reviewed.
• inSync keeps full audit trails to the content that is stored and accessed within the system. These audit trails include all end-user and IT administrator activity and are tamper-proof to ensure proper information management procedures were followed.
• When legal is ready to transfer held data into an eDiscovery ECA system, inSync provides legal administrator access to review held data and expose it for ingestion over the network.

5. Proactive Compliance

CrashPlan

Code42’s endpoint monitoring uses the CrashPlan app to identify different types of security events on each device and is simply a data monitoring/logging tool, that lets admins know of security events. Code42’s endpoint monitoring requires integration with Splunk Enterprise for any advanced visibility or insights.

CrashPlan’s pattern matching feature relies on a rule-based framework called YARA, which requires admins to place a file on each end-user’s device that uses endpoint detection. CrashPlan’s pattern matching feature also requires the custom scripting and maintaining of the YARA rule file for every pattern a admin wants to identify. Moreover YARA rules are incapable of reading PDFs, servilely limiting what is captured.

inSync

With inSync’s proactive compliance, enterprises can automate finding data risks either related to industry regulations (such as HIPAA, PCI DSS, or GLBA) or based on their own criteria (human resources, intellectual property,financial policies) stored across end-user devices and cloud applications.

• Centralized compliance dashboard: Compliance, security, and legal teams can access an easily-navigable dashboard that permits authorized users to visualize corporate data by data source, compliance risk type, risk level, user types, and other pertinent information.
• Predefined, customizable compliance templates: Organizations can select from predefined compliance templates or customize their own. Proactive Compliance automatically scans the data — wherever it is — and highlights troublesome items (such as social security numbers or health record data), and alerts the right people when suspect materials are found.
• Investigative search: When handling an investigation request by the legal team, authorized users can use inSync’s deep-search and legal hold capabilities to locate suspect materials, identify possible custodians, and place data on hold for eDiscovery purposes.

6. Security and Data Privacy

CrashPlan

CrashPlan provides incomplete data security, and its data privacy measures leave corporate data at risk of exposure.

• CrashPlan stores encryption keys on end user devices in plain text
• CrashPlan’s most basic security leaves it open to cloud data privacy issues, whereas their stronger encryption choices prevent compliance and legal teams from accessing employee stored files for auditing and litigation
• Because CashPlan still uses Java Virtual Machine (JVM), as the number of users and devices in a Code42 environment increases, the amount of Java Virtual Machine (JVM) heap space memory consumed in Code42 server(s) will also increase, resulting in Java “out of memory” (OOM) errors

inSync

With inSync, customers have complete data privacy.

• Unique digital envelope encryption ensures that encryption keys are never stored in the cloud or on endpoints, preventing anyone except the customer from accessing data
• inSync Cloud customers can easily comply with data residency laws given access to multiple regions

7. Availability and Data Durability

CrashPlan

CrashPlan’s cloud does not replicate data and has no stated SLAs.

• No data redundancy across Code42 data centers
• CrashPlan’s disaster recovery plan requires dual destination backups that increase storage/ bandwidth & costs
Cloud Infrastructure

inSync

Druva is built on native cloud technologies utilizing the power of the public cloud – Amazon Web Services (S3, DynamoDB, EC2), and Microsoft Azure, the two highest rated and most secure infrastructures available. By taking this approach we’ve removed all bottlenecks to scalability and elasticity that tends to plague systems that were initially designed for on-premise and retrofitted to the cloud. Our customers can leverage any of the AWS or Azure regions, and many of our global customers use multiple regions for addressing data residency/privacy regulations; for example in Germany.

Industry’s best cloud infrastructure

Certified cloud operations

8. Integrated file sync & share

CrashPlan

Code42 announced the end of life for SharePlan, in August 2015.

inSync

inSync was the first provider to integrate secure file synchronization and sharing with endpoint backup, and seamlessly integrate user productivity while giving IT admins granular control over sharing.

• File sharing data is globally deduplicated with backup data which amplifies bandwidth & storage savings
• Deep IT control & visibility
• enable sharing, share with who, mobile sharing, external/ link sharing
• user activity streams
• Integrated document viewer (view only links, expire link by # of views)
• Selective sync (save bandwidth, disc space on endpoint)

Conclusion

Code42 CrashPlan is an inadequate backup solution for the needs of today’s mobile enterprise. On the other hand, inSync offers the industry’s best data protection solution for all enterprise endpoints: laptops, smartphones and tablets. Validated by leading analysts firms (Gartner rated Druva highest overall product score three time in a row) and a growing customer base, inSync dramatically improves IT efficiencies and end-user productivity. A recent study conducted by the Ponemon Institute, Quantifying the Value of Unified Endpoint Data Management, indicates that enterprises can save more than $8,100 per user by employing a solution like inSync, which integrates endpoint backup with secure file sharing, DLP and analytics.

Product Comparison Chart

More Resources

Visit Druva.com/resources/ for additional resources for learning more about endpoint backup.