SaaS applications, once the exception, have become the standard approach for many enterprises. Maintaining them is usually less expensive and simpler than managing on-premises applications. However, under the Shared Responsibility Model, SaaS application providers are not responsible for backing up customer data, which leaves it exposed to both ransomware attacks and the risk of deletion — whether accidental or malicious. The responsibility falls entirely on the customer.