Track and Investigate SaaS Data Changes

Data Change Insights is a SysCloud add-on that helps you monitor, track, and investigate SaaS data changes and anomalies to support audits and reduce risk of data loss due to malicious insiders, integration errors and AI-generated changes in bulk. It is available as an add-on when you purchase SysCloud backup for Google Workspace, Microsoft 365, and QuickBooks Online.

SysCloud tracks newly added, changed, and deleted items. It also flags unusual activity such as excessive deletions, unexpected spikes in changes, and unusual record-level updates for investigation.

Data Change Insights detects anomalies by analyzing normal patterns of additions, deletions, and modifications in your SaaS data. Once SysCloud identifies typical behavior, it flags unusual activity, such as unexpected spikes in new records, deletions, or changes. For QuickBooks Online, SysCloud also gives you the option to upload audit logs, allowing it to analyze actual activity trends and behavior directly from the audit data to detect anomalies.

Data Change Insights creates an auditable trail of SaaS data changes and lets you export change sets for evidence and review. This helps support requirements of compliance regulations such as SOX and HIPAA and speeds up audits and investigations.

Changes are detected every time a backup job is run, typically once a day. Notifications via email can be configured based on the roles responsible for tracking data changes.

You can review the alert details, export flagged anomalies for review or record-keeping, mark findings as true positive or false positive, and dismiss alerts after investigation. 

Audit logs are recommended to improve detection accuracy and reduce false positives. You can use Data Change Insights without audit logs, but results may be less precise.

No. Data Change Insights policies are not currently customizable. SysCloud provides default settings designed to detect and report changes and anomalies without additional configuration. 

By identifying irregularities early, such as unauthorized deletions or modifications, it enables proactive actions to prevent potential data loss events.

SaaS applications often contain critical business data. Monitoring changes ensures data integrity, helps prevent data loss, and ensures compliance with regulations like SOX and HIPAA.

No. Setup is designed to be straightforward. If you use QuickBooks Online, you may need admin access to export audit logs as part of the setup.

Yes, for Google Workspace. Ask Sky which users and shared drives had unusual change activity, and it will show the pattern and how far it reached, with each finding cited to the backup snapshot comparison. Sky can also assemble a cited summary of the change set for an audit file. This capability for Microsoft 365 and QuickBooks Online is coming soon.