Sensitive data types in Veeam Backup & Replication and Veeam Backup for Microsoft Office 365 log files

Veeam Backup for Microsoft Office 365 log files may include the following types of sensitive data:

• User names and user IDs.
• Object names that are specific for a customer infrastructure, such as hosts and their hardware configuration, local data storage, and object storage repository.
• FQDN/Hostname or NetBIOS names.
• IP addresses (IPv4 and IPv6).
• Customer-specific paths to backup files.
• Path to the Veeam license file and license information.
• Certificate thumbprints.
• Azure AD application name, ID, and assigned permissions.
• Assigned Microsoft Office 365 roles.
• SharePoint and OneDrive information, such as SharePoint IDs, SharePoint site URLs, SharePoint hierarchy, names of backup files, names of SharePoint lists, site collection membership, information about existing sharing links, SharePoint settings.
• Exchange information, such as addresses of user mailboxes, mailbox IDs, mailboxes hierarchy, subjects of the Exchange items (for example, Email, Calendars, Meetings), and their modification date.
• Groups information, such as group membership, group mailbox address, group owner address.
• Teams information, such as teams names, channels names, names of backup files, members of a team and their roles, channel settings. 
• Exported data information, such as customer-specific paths and names of files.

The Veeam Customer Support team may provide a log scrubbing utility upon request.

For more information on how we process the collected data, please visit: https://vee.am/processing_of_sensitive_data