Proven at Scale
Datto SaaS Protection protects over four million users.
EnterProtect vs Datto, Including Where Datto Is Stronger
EnterProtect and Datto both protect servers and Microsoft 365, and both boot backups to prove they work. The differences are the term you sign, the hardware, and what you pay for people who've left.
At a Glance
Every Datto cell was checked against the linked page on the date shown. EnterProtect cells come from its locked specs and price books, and match the product pages.
TopicEnterProtectDattoSource and date checked
Pricing modelPublic list prices per mailbox or machine a month, storage included. MSPs buy below list on volume bands set by their whole book, and get their rate card once we've confirmed they're an MSP.Quote only. Flat-fee BCDR that Datto calls all-inclusive, with no hidden charges. SaaS Protection is billed per seat.Datto pricing, Kaseya BCDR, SaaS Protection pricing model
Storage includedPooled across your whole book: 1 TB a server or VM, 500 GB a workstation and 50 GB a mailbox, doubled on Complete. File Backup: 1 TB a server, 250 GB a workstation.Not itemised publicly. SIRIS keeps backups on the appliance and in the Datto Cloud.Kaseya BCDR, Datto pricing
ContinuityIncluded in BCDR Essential: local and cloud recovery, VM creation, DR plans and DR tests. Tests on your own appliance are free; compute in EnterProtect's recovery cloud is metered.Local and cloud virtualization, with recovery testing at no charge.SIRIS features, Kaseya BCDR
Contract termsMonth to month, with no minimum and no contract. A client that leaves is off your next bill, and a price change only applies going forward.SaaS Protection: one- or three-year commitments that renew automatically. Month to month isn't offered to partners who joined on or after January 22, 2023. SIRIS terms aren't published.SaaS Protection pricing model
How usage is countedEach machine or mailbox is billed for the exact time it was protected, to the second. Counts are final before the 1st, so you can invoice your clients on the 1st.SaaS Protection bills the higher of your Committed Minimum Quantity or actual usage, from a usage snapshot near month end.SaaS Protection pricing model
HardwareNo hardware to buy from EnterProtect, and no appliance licence. The appliance runs on any qualified x86-64 machine you or your client own, physical or virtual.Hardened SIRIS appliances in micro PC, desktop and rack-mount sizes, or software-only as a VM or image on existing hardware. Endpoint Backup goes direct to cloud with no hardware.Kaseya BCDR, Datto Endpoint Backup
VerificationEvery new BCDR recovery point goes through five checks, ending in an isolated boot with a screenshot. Microsoft 365 checks run six levels, the last a restore through the real recovery path. "Verified" names the level reached.AI screenshot verification boots the backup on the appliance, configured per agent, and checks that applications are accessible. Datto notes it doesn't test non-boot volumes.Screenshot verification, SIRIS features
ImmutabilityEvery retained point sits under a compliance-mode lock that renews daily, with the retention authority outside the console. Nobody can shorten it, including EnterProtect.The immutable Datto Cloud, with Cloud Deletion Defense to undo accidental or malicious backup deletion.SIRIS features
RetentionAny length, including unlimited, on every plan. Retained data counts toward your pooled storage.SIRIS: time-based or infinite cloud retention. SaaS Protection: time-based up to one year, or infinite until the subscription is cancelled.Kaseya BCDR, SaaS Protection pricing model
After you cancel30 days, every one enforced by the storage lock, and reactivating inside the window cancels it. Then a signed destruction certificate. Longer needs a legal hold.Cloud data kept 60 days after you cancel a device; the device keeps backing up for 30. Restores stay available, and a copy is at your expense. Local data stays on the device.Data retention after service cancellation
People who leaveArchived users at half the active price: searchable, held if you need it, and restorable into a colleague's mailbox without a Microsoft licence.An archived seat is a billable seat. After the retention period, the last snapshot is kept while the seat stays licensed.SaaS Protection pricing model
Microsoft 365 coverageExchange user, shared, room and equipment mailboxes, OneDrive, SharePoint and Teams, six times a day. Complete adds Entra ID, Conditional Access, Intune, BitLocker keys and Planner. No archive, group or public-folder mailboxes.Exchange, Tasks, SharePoint, Teams and OneDrive, three automated backups a day plus on demand. Entra ID through Datto Backup for Microsoft Entra ID.SaaS Protection features, Datto Backup for Microsoft Entra ID
BCDR topologyAn appliance on hardware you own for fast local backup, boot and verification, with the immutable copy in EnterProtect's cloud, or direct to cloud with no appliance. Recovers to the appliance, Hyper-V, VMware or EnterProtect's cloud.A SIRIS appliance with the Datto Cloud, recovering locally or in the Datto Cloud. Endpoint Backup for machines without an appliance.SIRIS features, Datto Endpoint Backup
File and application backupFiles and folders on Windows, Linux and Apple Silicon Macs, SMB and NFS shares, native Synology and QNAP packages, System State, SQL Server, Exchange, PostgreSQL, MySQL and MariaDB.Datto File Protection backs up files and folders on workstations and laptops to the Datto Cloud, with up to 180 days of versions.Datto File Protection
Where data livesIn the storage region you choose for each client, plus a local copy on your BCDR appliance. Cloud recovery runs in EnterProtect's own recovery cloud.On the SIRIS appliance and in the private Datto Cloud.Kaseya BCDR
Where Datto Is Stronger
You'll hear these from Datto's team, so you should hear them from us first. Each one is checked against Datto's and Kaseya's own pages, with the dates in the table above.
60 Days After You Cancel
Datto keeps BCDR cloud data 60 days after you cancel a device, and the device keeps backing up for 30. EnterProtect keeps 30 days, enforced by the storage lock; longer needs a legal hold.
Recovery Testing at No Charge
Datto includes recovery testing at no charge. EnterProtect's checks and tests on your own appliance are free, but compute in its recovery cloud is metered.
One Vendor for the Box
Datto provides hardened SIRIS appliances in three form factors, so the hardware and the support come from one place. EnterProtect sells no hardware, so you source a qualified machine.
Support Around the Clock
Datto offers 24/7/365 direct-to-tech support. EnterProtect doesn't publish a support response-time target.
Where EnterProtect Is Different
These are the rows where the fine print decides your margin: the term you sign, the hardware, and what you pay for people who've left.
Month to Month, No Commitment
No minimum and no required term, and a client that leaves is off your next bill. Datto SaaS Protection renews one- or three-year commitments and bills at least the committed quantity.
No Appliance Licence
BCDR is priced per protected machine, with nothing recurring per appliance. Datto quotes SIRIS with the appliance, software, cloud and support packaged together.
Retention Is a Setting, Not a SKU
Any length, including unlimited, on every plan. Datto offers time-based or infinite retention, and SaaS Protection's time-based option stops at one year.
Archived Users at Half Price
When someone leaves, their mailbox stays searchable, held and restorable at half the active price. At Datto, an archived seat is a billable seat.
Six Captures a Day
Every Microsoft 365 workload is captured every four hours. Datto SaaS Protection runs three automated backups a day.
Entra ID Inside Complete
Microsoft 365 Complete covers Entra ID, Conditional Access, Intune policy, BitLocker keys and Planner in one per-mailbox price. Datto protects Entra ID with its own product, Datto Backup for Microsoft Entra ID.
Microsoft 365 Backup
Both protect Exchange, OneDrive, SharePoint and Teams outside the tenant. EnterProtect captures twice as often, charges half for people who've left and runs month to month.
How Often It Captures
EnterProtect captures every workload every four hours, six times a day. Datto SaaS Protection runs three automated backups a day, plus backups on demand.
Terms
EnterProtect is month to month with no minimum. Datto SaaS Protection runs on one- or three-year commitments that renew automatically, billed at the higher of your committed quantity or actual usage, and month to month isn't offered to partners who joined on or after January 22, 2023.
People Who Leave
EnterProtect bills an archived user at half the active price, still searchable, held and restorable. At Datto, an archived seat is a billable seat, and after the retention period the last snapshot is kept while the seat stays licensed.
Retention
EnterProtect keeps data as long as you set, with no cap, on every plan while the client is protected. Datto offers time-based retention up to one year, or infinite retention until the subscription is cancelled.
Identity
EnterProtect Complete protects Entra ID, Conditional Access, Intune policy, BitLocker keys and Planner, and rebuilds a damaged tenant in place. Datto covers Entra ID, including Conditional Access policies, through Datto Backup for Microsoft Entra ID.
Price
Datto quotes privately. EnterProtect's list price is $3.00 a mailbox a month on Essential, $4.50 on Complete and $1.50 for an archived user.
BCDR
Datto packages the appliance, software, cloud and support. EnterProtect sells no hardware and charges no appliance licence: run it on a machine you own, or direct to cloud.
Hardware
Datto provides hardened SIRIS appliances in micro PC, desktop and rack-mount form factors, or runs software-only as a VM or image on existing hardware. EnterProtect sells no hardware: its appliance runs on any qualified x86-64 machine you or your client own, physical or virtual, with nothing recurring per appliance.
Proof
EnterProtect checks every new recovery point five ways, from chunk integrity to an isolated boot with a screenshot and a workload check. Datto's AI screenshot verification boots backups on the appliance and checks applications are accessible, and Datto notes it doesn't test non-boot volumes.
Recovery and Testing
Datto virtualizes locally or in the Datto Cloud and includes recovery testing at no charge. EnterProtect includes local and cloud recovery, DR plans and DR tests in BCDR Essential. Tests on your appliance are free, and compute in its recovery cloud is metered.
Immutability
Datto stores snapshots in the immutable Datto Cloud, with Cloud Deletion Defense to undo accidental or malicious deletion. EnterProtect puts every retained point under a compliance-mode lock that renews daily, and nobody can shorten it, including EnterProtect.
After You Cancel
Datto keeps cloud data 60 days after you cancel a device, and the device keeps backing up for 30. EnterProtect keeps 30 days, every one enforced by the storage lock, and a legal hold keeps it longer.
Price
Datto quotes a flat fee privately. EnterProtect's list prices are public: $75.50 a server, $38.00 a virtual machine and $15.00 a workstation a month on Essential, and $98.00, $49.50 and $19.50 on Complete.
File Backup
Datto File Protection backs up files on workstations and laptops. EnterProtect File Backup also covers servers, shares, NAS devices and applications.
What It Covers
Datto File Protection covers files and folders on workstations and laptops. EnterProtect adds servers, SMB and NFS shares, native Synology and QNAP packages, System State, SQL Server, Exchange, PostgreSQL, MySQL and MariaDB.
Versions Kept
Datto keeps up to 180 days of versions. EnterProtect keeps versions as long as you set, starting from a 30-day default.
Clients Restoring Their Own Files
Both let a client recover their own files. With EnterProtect, give a client's IT person the Backup Admin role and they restore within limits you set, beside the original rather than over it.
Price
Datto doesn't publish File Protection pricing. EnterProtect's list price is $9.00 a workstation and $34.00 a server a month, with 250 GB and 1 TB included and pooled across your book.
Switching From Datto, Client by Client
Nobody should pay two vendors for the same seat, and no client should be your test. Start at home.
- 01
Protect Your Own MSP First
Your own Microsoft 365 is free for a year while you protect clients, so you run EnterProtect on your own data before a client's.
- 02
Move Each Client at Its Renewal
Move one client at a time, as its Datto term ends, so you never pay two vendors for the same seat.
- 03
Settle the Old History Before You Cancel
EnterProtect can't import Datto backups, so history starts at the first capture. Datto keeps cloud data 60 days after you cancel a device, and a copy is at your expense, so decide what the client must keep first.
- 04
Prove It in Front of the Client
Restore something they care about and hand them the signed report. That's the first proof on the new line.
EnterProtect vs Datto Questions
Something we haven't answered? A person reads every message.
What's the difference between EnterProtect and Datto?
Both protect servers and Microsoft 365, and both boot backups to prove they work. EnterProtect is month to month with no commitment, sells no hardware and charges no appliance licence, bills archived users at half price and captures Microsoft 365 six times a day. Datto has over four million SaaS Protection users, keeps cloud data 60 days after you cancel, includes recovery testing at no charge and provides its own appliances.
Do I need to buy an appliance for EnterProtect BCDR?
No. EnterProtect sells no hardware and charges no appliance licence. Its appliance runs on any x86-64 machine that meets the published minimums, physical or virtual, including hardware you or your client already own. Or protect a machine direct to cloud with no appliance at all.
Does EnterProtect have a minimum term?
No. It's month to month, billed on what you actually protect, with no minimum. A client that leaves is off your next bill. For comparison, Datto SaaS Protection runs on one- or three-year commitments that renew automatically.
What happens to my clients' Datto backups if I switch?
They stay with Datto, because EnterProtect can't import another vendor's backups. Datto keeps BCDR cloud data 60 days after you cancel a device, with restores still available and a copy at your expense, and local data stays on the device. EnterProtect starts each client's history at its first capture.
How long does EnterProtect keep data after we cancel?
30 days, and every one is enforced by the storage lock, so no account, console or billing event can delete early. Reactivating inside the window cancels the offboarding, and longer needs a legal hold. Datto keeps BCDR cloud data 60 days.
Does EnterProtect back up Entra ID?
Yes, on Microsoft 365 Complete: Entra ID, Conditional Access, Intune policy, BitLocker keys and Planner, with a damaged tenant rebuilt in place. Datto protects Entra ID through Datto Backup for Microsoft Entra ID.
How current is this comparison?
Every row shows the date it was checked against Datto's and Kaseya's own pages. Vendors change their terms, so if something here has moved, tell us on the corrections page.
No Appliance Licence. No Term to Wait Out.
If a Datto renewal or an appliance refresh is on your desk, compare its fine print with ours. It's four lines.
Commitments in Writing
- When a client leaves, so does its bill.
- No contract and nothing to renew. A price change only applies going forward.
- Every MSP gets the same rate card at the same volume.
- A missed payment pauses service. It never shortens an immutable copy.