On May 25, 2018, the EU’s General Data Protection Regulation came into effect. While all businesses should now be compliant, there are still GDPR opportunities for MSPs. Smart MSPs saw GDPR as an opportunity for profit and are winning business by helping companies streamline their data management processes. The compliance deadline may have already passed, but there are still many GDPR opportunities for MSPs. MSPs can help companies stay compliant, reduce the time their clients have to spend on compliance-related tasks, help them improve security, and save their clients money.

Key GDPR Opportunities for MSPs

GDPR compliance and security services are a potential gold mine for MSPs. MSPs will have had to go through the GDPR compliance process themselves, so they should already be well versed in what is required. They will have gained valuable insights into GDPR through that process, which can be passed on to their clients.

The GDPR compliance solutions that MSPs use on a day-to-day basis could be offered to clients as compliance-as-a-service. GDPR also provides an opportunity to sell clients additional security services to ensure the data of their customers are properly protected. With fines up to €20 million or 4% of global income possible, there is a major incentive for ensuring continuing compliance with the GDPR.

There are security opportunities such as data encryption, spam filtering, and web filtering, which can be grouped together and sold as a GDPR security package. MSPs can also offer auditing services to ensure their clients are fully compliant with GDPR.

It is a requirement of GDPR for companies to appoint a Data Protection Officer (DPO), but many SMBs lack the internal talent. While a DPO may have been assigned, the time spent on that role could be put to better use. Another of the GDPR opportunities for MSPs is offering a DPO-as-a-service to fulfill that aspect of GDPR compliance for their clients.

Email Archiving for MS Exchange – An Easy Win for MSPs

Any business that collects or processes the data of EU citizens must have mechanisms in place that allows data related to an individual to be quickly found. An EU citizen can contact a company and request a copy of the information that is held on them and, if they so wish, can request that the processing of their data is stopped and have their data deleted.

When individuals exercise their right to erasure – or right to be forgotten – a company is required to honor that request within 30 days. In order to be able to process those requests efficiently, a company must know the location of all its data. Companies should therefore have conducted an audit of their systems to identify all locations where personal data are stored. When a request is received, the individual’s data can then be quickly produced (and deleted if necessary).

Personal data are likely to be included in emails and email attachments and locating those emails can be a major challenge. Any company that does not use an email archive is likely to face problems finding emails in backups. Since an email archive is searchable, it is a quick and easy process to locate all emails related to a specific individual. The introduction of GDPR creates a compelling case for purchasing an email archiving solution – which is another of the key GDPR opportunities for MSPs.

By offering email archiving for MS Exchange or other mail services, MSPs can help their clients comply with the GDPR requirements for security, data retention, auditing, and the right to erasure.

ArcTitan: An Easy Email Archiving Service for MSPs

ArcTitan is an easy to use and easy to manage email archiving service that has been developed to meet the needs of businesses and managed service providers.

ArcTitan is a cloud-based secure archive deployed on AWS that is compliant with the GDPR for email retention and auditing, as well and all major regulatory standards. ArcTitan is compatible with all major mail servers and email services and will meet the requirements of the most demanding clients.

The solution provides almost instant access to data, gives instant search results, and allows instant archiving. A search of 30 million emails takes less than a second and messages are archived at a rate of more than 200 per second. The archive is encrypted and email data are stored securely in the cloud on Replicated Persistent Storage on AWS S3. The solution is also scalable to more than 60,000 users and customers only pay for active users.

To meet the needs of MSPs, ArcTitan is available with a range of hosting options – In the TitanHQ Cloud, a dedicated private cloud, or ArcTitan can be deployed in an MSP’s own data center.  API integration allows MSPs to provision customers through their own centralized management system, there is a growth-enabling licensing program, and usage-based pricing and monthly billing. ArcTitan is also rebrandable and can be supplied as a white label ready to take an MSP’s logos and corporate colors.

If you have yet to offer email archiving to your clients or you are unhappy with your current provider’s service or the margin, contact the TitanHQ team today.