One dashboard. Every Mac.
macup gives Mac-first teams a backup tool designed for how they actually work: fast-moving, individually administered, allergic to enterprise software.
No card required
Every Mac. Every snapshot. One pane.
See which Macs backed up today, which didn't, which are approaching their quota, which need a passphrase reset. Assign policy per role (creatives get Cloud + external, ops gets Cloud only). Reassign a license when someone changes machines. Revoke when someone leaves.
Different roles, different rules.
Creatives back up 2 TB to Cloud + an external on rotation. Ops folks back up Documents + Desktop to Cloud only. Engineering backs up everything except DerivedData to a shared BYOS S3 bucket. One admin sets it once; every new hire inherits their role's policy.
Audit log. Org-escrow recovery. DPA on request.
Every admin action is logged with actor, timestamp, and target. Org-level key escrow means you can recover a departed employee's data legally, without pressuring them. A GDPR-aligned DPA is available on request. SOC 2 Type II is in progress.
Honest about what's coming.
- 2026 Q4 · SAML SSO + SCIM provisioning for M365 and Google Workspace
- 2026 Q4 · Group policies with inheritance
- 2027 Q1 · Delegated admin roles (ops vs security vs billing)
- 2027 Q1 · SOC 2 Type II report available to customers under NDA
About team deployment.
What's the minimum team size?
Business pricing kicks in at 10 devices. Under 10 devices, buy individual licenses through the standard tracks. Over 10, you get volume pricing, the admin dashboard, and org-level recovery.
Can a departed employee's backups be restored by the admin?
Yes — on the Business tier. The admin holds an org-escrow key that can unwrap any employee's encryption key, without needing the employee's passphrase. This is a compliance-required feature, not a bug. The employee is notified if org-escrow is used against their data (regulatory best practice).
How does license reassignment work?
Revoke an old device; reassign the license to a new employee's Mac. The old device's local cache remains encrypted; the cloud repository remains intact and accessible via the admin dashboard. No data is lost during reassignment.
Is there SSO?
SAML + SCIM SSO is on the roadmap for 2026-Q4. M365 and Google Workspace OIDC are planned alongside. Email hello@macup.app if you need SSO to sign — we prioritize by demand.
Can I export audit logs?
Yes. Admin actions (license assignment, org-escrow access, policy changes) are logged; CSV export from the dashboard or API access on higher tiers.
Every Mac on your team, backed up and accounted for.
Book a demo or start a 14-day team trial. No credit card.