IDC on SaaS Data Backup Requirements and Best Practices
When it comes to protecting customer account records in Salesforce or configuration items in ServiceNow, the SaaS provider isn't responsible if that data is accidentally or maliciously deleted, overwritten, corrupted, accessed by unauthorized parties, encrypted by ransomware, or otherwise damaged or lost. That data is the customer's responsibility.
