How Zoop, a Fintech processing 2B+ financial operations monthly, backs up and restores GitHub repositories

Challenge

No industry is safe from the threat of hacker attacks, and the financial sector has proven that much. And it’s not surprising, we are speaking about money, after all. From time to time we spot news in media headlines about hacker attacks on financial institutions and breached accounts. So, it’s evident that financial institutions and their operations need reliable and proven protection. Zoop's approach can be an excellent example of the best security practices for other companies, not only financial ones.

In this case study article, we will look at Zoop, a Brazilian fintech technology leader, and how this financial services giant uses GitProtect.io to ensure the security of its GitHub critical data. You will learn about the security challenges the company has faced and the actions taken to overcome them.

Let’s meet Zoop

Zoop is one of the biggest fintech companies in Latin America. In 2021 the British magazine Daily Finance included this young company into the list of “the best fintech startups that bring innovation to the services of the financial system”. At the same time Fast Company mentions Zoop, a Rio de Janeiro-based fintech service, as one of the TOP 10 Most Innovative Companies in Latin America “for helping small businesses bank up.” The company processes 2 billion+ financial operations monthly with its instant payment system.

The way it builds technology

More than 300 employees are working and developing Zoop’s innovative financial technologies - Zoop Payments and Zoop Banking. The company uses GitHub Enterprise and GitHub Advanced Security under an Advanced Security license. It has around 700 repositories in its organization and approximately 160 users.

Zoop explains its service simply: it is a solution that allows companies from any segment to start operating as a payment institution, and Zoop has already helped 1k+ companies with it. Working through a White Label platform, the company develops technology for payment terminals and offers its partners software for POS and MiniPos terminals. Besides that, it also offers APIs for online payments and other functionalities to make all the process easier, like split, anticipation, etc. It performs the implementation via APIs which makes the operations simple and fast, optimizing the launch time of the service.

Zoop’s journey to back up GitHub with GitProtect.io

Working in the financial sector requires a lot of responsibility and attentiveness to security. Companies should follow strict internal regulations and security requirements, like SOC 2, ISO27K, GDPR, PCI DSS, SOX, and many others. Financial sector deals with money, so the companies need to build an authentic security plan following all those strict security standards, and backup is one of the necessary requirements. In short, due to very stringent legal and internal requirements, financial organizations can be regarded as the best benchmark when it comes to security - and Zoop's responsible approach is the best example of this.

Thus, Zoop faced its biggest challenge - to have all its repositories and metadata backed up with an easy and fast restore model. Moreover, they needed to keep its environment always up to date and maintain only what is really productive.

First, Zoop considered backup of GitHub repositories as a necessary security measure. Though, later another reason appeared - compliance. We all know that GitHub repository backup is one of the major requirements of passing Security Audits. Even while GitHub is thought of as a very reliable git hosting service provider, it’s not a secret that it can experience outages and crises. Let’s just look at the track of GitHub-related most severe security incidents of 2022

The company started to build its backup strategy on its own - the security engineers manually backed up each repository and stored them on Google Drive and its company S3. For a while this solution worked well, but it needed a lot of manual maintenance, as the company needed to authorize somebody from the team to write and perform this manual process of backup. And here a certain concern arose - this approach could lead to limited DevOps team resources and high long-term costs.

So, Zoop understood that it needed an automated backup solution. The company required the tool that would bring the ease of use - would provide with the possibility to create several backup plans according to the organization’s needs and would ensure a fast and efficient restore process.

Eventually, the company’s security engineers started looking for a more reliable GitHub backup solution and that's how our joint journey began.

Embracing GitProtect.io and security into its workflow

Searching for a tool that would permit creating automated custom backups for its GitHub environment, Zoop’s team discovered GitProtect.io. After a careful analysis of this DevOps backup and recovery software, they understood that GitProtect.io was the most adherent tool to what they wanted for the reasons of functionality, practicalities, and values. And most importantly - it would let developers focus on generating growth and limit manual backup maintenance costs.

GitProtect GitHub backup and valued features

GitProtect.io is a leading maintenance-free GitHub Backup and Disaster Recovery software. Thanks to the numerous years in the field of backup (GitProtect.io is a product of Xopero Software ), the backup solution has taken only the best traditional backup technologies and managed to build a reliable protection for repositories and metadata.

Why GitProtect?

The final results of GitProtect.io backup and recovery tool adoption turned out to meet all Zoop expectations and allowed them to solve their challenges in terms of security, automation of data protection, and instant, proven recovery.