← Blog
June 23, 2025

Cloud Backup: Complete Guide to Secure Data Protection in 2026

Your computer crashes at 3 PM on a Tuesday, taking months of work with it. Or ransomware locks down your entire system, demanding payment for files you can’t afford to lose. These scenarios happen to businesses and individuals every day, but they don’t have to end in disaster.

Cloud backup stores separate copies of selected data remotely for recovery. Backup software can automate this process, but you still need to choose what is covered, configure retention, monitor failures, and test restores.

This guide walks you through everything you need to know about cloud backup, from understanding different solution types to implementing a strategy that protects your data without breaking your budget.

What is Cloud Backup

Cloud backup software copies selected files, systems, or application data to remote storage. Copies may be created on a schedule or as changes occur, depending on the service and configuration. A successful backup must complete before it can be used for recovery.

Offsite backups can help you recover after hardware failure, a local disaster, accidental deletion, or ransomware. Recovery depends on having an accessible, usable copy from before the loss. Retention, isolation, and restore testing matter as much as storing another copy.

Modern cloud backup solutions offer scalable storage that grows with your business needs. You start with what you need today and expand capacity as your data requirements increase. The service handles all the infrastructure—servers, security updates, and maintenance—while you get reliable data protection without managing physical hardware.

Features to check in the specific backup service and plan include:

  • Encryption: Check protection in transit, such as TLS, and encryption at rest, such as AES-256, together with who controls the keys
  • Redundancy: Your files are stored across multiple drives and often multiple data centers
  • Incremental backups: Only changed data since the last backup gets uploaded, saving time and bandwidth. Incremental backups save storage space by capturing only changes since the last backup.
  • Versioning: Multiple historical versions of files are retained for point-in-time recovery
  • Automation: Scheduled backups run without manual intervention

Types of Cloud Backup Solutions

Different cloud backup solutions serve different needs, from individual users protecting personal photos to enterprises managing compliance requirements.

Personal Cloud Backup

Personal cloud backup targets individual users protecting photos, documents, and home computers. Compare storage limits, supported devices, renewal prices, and retention before choosing a plan. Where an app is provided, select the files or folders to back up and confirm that the first backup completes.

Popular personal solutions include automatic photo backup from smartphones, protection for important documents stored on your desktop, and recovery options when you upgrade to a new device. Most personal plans offer cross-platform support for Windows, macOS, iOS, and Android devices.

Business Cloud Backup

Business cloud backup addresses enterprise-grade security, compliance, and scalability requirements. These solutions include centralized management consoles, advanced reporting features, and integration with existing IT systems.

Business plans vary by protected workload, device or user count, storage volume, and support level. Depending on the product, they may include backup policies, centralized administration, audit logs, or system-image recovery. Confirm which features are included for the systems you need to protect.

Hybrid Backup Solutions

Hybrid backup combines local and cloud storage for optimal performance and protection. Fast local backups enable quick file recovery for common scenarios, while cloud copies protect against site-wide disasters like fires or floods.

A hybrid setup can support the 3-2-1 backup rule: three copies of important data, on two storage types, with one copy offsite. Count the original and backup copies explicitly. Local and cloud storage alone do not guarantee that every part of the rule, or your recovery requirements, is met.

Platform-Specific Backup Services

Many cloud applications need dedicated backup solutions since they store data outside traditional file systems.

Microsoft 365 backup services differ in the workloads they cover, such as Exchange email, SharePoint, OneDrive, or Teams data. Compare user licensing, retention, restore options, and current pricing for the exact service. Do not assume that one plan protects every Microsoft 365 workload.

For Google Workspace, check whether the selected backup service covers the Gmail, Drive, Calendar, shared-drive, and other data your organization uses. Verify permissions, backup frequency, retention, and restore limitations instead of assuming a fixed storage allowance or complete coverage.

Application-specific solutions extend beyond file storage to back up supported SaaS data. Check which records, settings, permissions, and configuration details each integration captures and can restore.

Continuous Data Protection

Continuous data protection provides real-time backup capabilities for mission-critical applications. Instead of scheduled backups that might lose hours of work, these systems capture changes as they happen.

Continuous data protection can suit environments with frequent changes. The achievable recovery point depends on the workload, replication or backup process, and any delays. Test the actual result against your target instead of assuming seconds-level recovery for every system.

Cloud Backup vs Traditional Backup Methods

Cloud backup reduces the storage infrastructure you need to manage locally. You may still need local or offline copies, backup software, and administration as part of your wider recovery plan.

Traditional backups may be kept locally or on removable media. Copies left beside the primary system can share its exposure to theft, fire, or flood; removable media stored securely offsite can reduce that shared risk.

Offsite storage reduces exposure to a disaster at your premises. Check the provider’s storage locations, availability terms, and recovery process so that a local incident does not also prevent access to your backup.

Remote access can help you recover while traveling or working elsewhere, provided you have connectivity, account access, any required keys, and a supported restore method. Keep those dependencies in your recovery plan.

Built-in redundancy can protect stored data against some infrastructure failures. Check whether copies stay within one location or span regions, and what recovery access is available. Redundancy does not replace historical backups or protection against unwanted deletion.

However, cloud backup does have limitations compared to traditional methods:

  • Initial backup time can be lengthy for large datasets, especially with limited internet bandwidth
  • Ongoing bandwidth consumption affects network performance during backup windows
  • Data sovereignty concerns arise when sensitive information crosses jurisdictional boundaries
  • A network outage can interrupt transfers from your premises; cloud-to-cloud backups and local restore options may behave differently

Local copies can avoid internet transfer time during recovery, while offsite copies reduce exposure to incidents at your premises. Compare both using your data size, available bandwidth, storage performance, and tested restore process.

Key Features to Look for in Cloud Backup Services

Evaluate encryption in transit and at rest separately. For example, TLS protects a connection, while AES-256 may be used to encrypt stored data. Those labels alone do not establish end-to-end encryption or prove that the provider cannot decrypt your files.

If a provider offers a zero-knowledge option, check its key-management and recovery documentation. Confirm who can decrypt the data, what account recovery permits, and what happens if you lose the necessary credentials or keys.

Automated backup scheduling with incremental and differential backup options reduces administrative effort and human error. Incremental backups capture only data that changed since the last backup, while differential backups include all changes since the last full backup.

In a traditional full-plus-incremental chain, restoration may require the full backup and subsequent increments. A differential restore generally uses the full backup and the latest differential. Actual storage use and restore speed also depend on the service’s implementation, so measure them with your data.

Versioning capabilities let you restore previous file versions from specific dates. This feature protects against accidental changes, file corruption, or gradual data problems you don’t notice immediately. Quality services retain multiple versions over extended time periods.

Cross-platform support for Windows, macOS, iOS, and Android devices ensures consistent protection across your technology environment. Look for services that handle different operating systems without requiring separate backup strategies.

Recovery Features and Capabilities

Check whether the service can restore individual files, folders, application data, or a complete system. File recovery can address accidental deletion, but restoring an operating system and applications requires a supported system-level backup and restore method.

Point-in-time recovery restores an available retained recovery point. The time you can recover to depends on backup frequency, retention, and the workload; it may not match the exact moment an incident began.

Bare metal recovery enables complete system restoration after hardware failure. The service can restore your entire computer setup—operating system, applications, settings, and data—to new hardware, minimizing downtime during equipment replacement.

If you need mobile access during an incident, test the provider’s supported app or browser workflow. Being able to download a file on a phone does not mean you can restore a complete system from that device.

Cloud Backup Pricing and Storage Options

Compare current quotes for the same protected data volume and retention period. Consumer backup subscriptions, business backup software, and S3-compatible storage are different products and may charge on different terms.

For business plans, check whether pricing is based on devices, users, workloads, or stored data. Confirm which management features, support levels, and recovery options are included in the quoted price.

For Microsoft 365 and other SaaS backups, check licensing, retention, supported workloads, and any storage or fair-use limits. Verify renewal terms instead of comparing an introductory offer with a recurring price.

Treat advertised savings as a comparison to examine. Include storage, software licensing, retrieval, data transfer, minimum commitments, and any migration charges that apply to your workload before estimating the total cost.

Storage pricing models vary significantly between providers:

Plan Type Pricing Basis to Check Terms to Verify Best For
Personal Backup Storage or protected devices Renewal price and retention Individual users
Business Backup Devices, users, or workloads Included software and support Teams
Enterprise Backup Contract and workload scope Retention, recovery, and service terms Large organizations
Microsoft 365 Backup Licensed users and supported workloads Storage limits and renewal terms Supported Microsoft 365 data

Consider long-term storage growth when evaluating pricing. Your backup file size will increase progressively as you create more data and retain more file versions. Choose providers with flexible scaling options that won’t penalize growth.

Security and Compliance Considerations

Check the documented encryption method for stored backups and the protocol protecting transfers. Review key ownership and access controls as well: encryption does not compensate for compromised credentials or an unsafe restore process.

A zero-knowledge design aims to keep usable decryption keys away from the provider. Confirm how that design applies to the selected product, sharing features, and account recovery. It does not remove risks on a compromised device.

SOC 2 reports describe an examination of specified controls; they do not establish blanket regulatory compliance. For GDPR, review the processing agreement, security measures, subprocessors, and relevant transfer arrangements. Your organization still has responsibilities for how it uses the service.

Immutable retention can prevent changes or deletion for a configured period. Check who can disable it, whether it is locked, and whether copies can survive compromised administrator credentials. A legal hold is not automatically equivalent to locked immutability, and neither proves that a retained copy is clean.

Additional security features to evaluate include:

  • Multi-factor authentication for account access
  • Geographic data residency controls for compliance
  • Access logging and audit trails
  • Data retention policies that match business requirements
  • Incident response procedures and notification systems

For regulated or sensitive data, have the responsible security or privacy team assess the service, contract, configuration, and recovery process against your requirements. Do not infer compliance from a provider’s general security claims.

Best Practices for Cloud Backup Implementation

Follow the 3-2-1 backup rule as your foundation: maintain three copies of important data, store them on two different storage types, with at least one copy kept offsite. Cloud backup naturally provides the offsite component while you maintain local copies for quick access.

Test backup and restore procedures regularly to ensure data integrity and system functionality. Many organizations discover backup problems only when they need to restore data during emergencies. Schedule quarterly restore tests using non-critical data to verify your backup strategy works correctly.

Set appropriate Recovery Point Objectives (RPO) and Recovery Time Objectives (RTO) based on business needs. RPO defines the tolerable data-loss window, while RTO sets the target time for restoring the affected service. Assess each workload’s needs and dependencies with the people who rely on it; stricter targets can require different resources and recovery methods.

If the tolerable data-loss window is one hour, design and monitor the backup process so a usable copy is no more than an hour old. Scheduling a job hourly does not by itself meet that target if jobs fail or run late. If recovery must finish within four hours, test the complete restore process against that target.

Monitor backup status and receive notifications for failed or incomplete backups. Automated monitoring catches problems quickly, allowing time to resolve issues before they affect data protection. Configure alerts for backup failures, unusual backup file sizes, and extended backup completion times. Regular testing and reviews are essential for successful disaster recovery and to adjust RPOs and RTOs as the company grows.

Key monitoring points include:

  • Backup completion status for all scheduled backups
  • Data verification to confirm backup integrity
  • Storage capacity usage and growth trends
  • Network bandwidth consumption during backup windows
  • Error logs and failure notifications

Backup Scheduling and Automation

Configure daily incremental backups to minimize data loss windows while managing storage space efficiently. Incremental backup captures only files that changed since the last backup, reducing backup time and storage requirements.

Choose a full-backup schedule appropriate to the product and workload. Some services use an initial full backup followed by incrementals. A full file backup covers the selected files; it is not necessarily a bootable image of the entire system.

Where supported, continuous protection can reduce the data-loss window for critical applications. Confirm application consistency, transfer delays, and recovery-point availability before relying on it for a demanding recovery target.

Set bandwidth throttling to avoid network performance issues during backup operations. Limit backup traffic to prevent interference with normal business operations, especially important for organizations with limited internet connections.

Consider these scheduling strategies:

  • Stagger backup times across different systems to distribute network load
  • Prioritize critical data for more frequent backup schedules
  • Adjust schedules seasonally for businesses with varying activity levels
  • Account for time zones when managing geographically distributed systems

Common Cloud Backup Challenges and Solutions

Initial backup time can be lengthy, especially with large datasets and limited internet bandwidth. Some organizations face weeks-long initial backup windows that strain network resources and delay protection coverage.

Solution: Use seed loading services where providers ship physical storage devices for initial data transfer. You copy data locally to encrypted drives, ship them to the provider, and subsequent backups happen online with only changed data.

Internet bandwidth limitations affect backup performance and can interfere with normal business operations. Organizations with limited connectivity struggle to backup large amounts of data without impacting productivity.

Solution: Implement bandwidth management and smart scheduling. Configure backups during off-hours, use bandwidth throttling to reserve capacity for business operations, and prioritize critical data for more frequent backup cycles.

Data sovereignty concerns arise when sensitive information crosses jurisdictional boundaries, potentially violating regulatory requirements or organizational policies about data location.

Solution: Choose providers with local data center options that keep your backup data within required geographic boundaries. Verify provider policies about data location and government access requests.

Vendor lock-in risks develop when backup data becomes difficult to migrate between services due to proprietary formats or limited export capabilities.

Solution: Select services with standard export formats and open APIs that facilitate future migrations. Test data export procedures before committing to long-term contracts, and maintain documentation of backup configurations.

Additional challenges include:

  • Restore time limitations for large datasets over internet connections
  • Cost management as backup storage requirements grow
  • Compliance complexity across multiple regulatory frameworks
  • Integration difficulties with existing IT infrastructure

Choosing the Right Cloud Backup Provider

Evaluate storage capacity, pricing, and scalability options for future growth. Your backup requirements will increase progressively as your organization grows and creates more data. Choose providers with flexible scaling that won’t penalize expansion.

Compare backup speed, restore performance, and customer support quality across potential providers. Fast backup speeds reduce the impact on daily operations, while quick restore capabilities minimize system downtime during recovery situations.

Review security certifications, compliance standards, and data center locations to ensure they meet your requirements. Different industries need specific compliance frameworks, and data location affects both performance and regulatory compliance.

Consider integration capabilities with existing IT infrastructure and applications. Seamless integration reduces implementation complexity and ongoing management overhead. Look for providers that support your current systems and future technology plans.

Key evaluation criteria include:

Factor

Questions to Ask

Why It Matters

Performance

How fast are backups and restores?

Affects daily operations and recovery time

Security

What encryption, assurance reports, and relevant certifications are available?

Helps assess security and compliance requirements

Scalability

How easily can storage and features expand?

Accommodates business growth

Support

What support levels and response times are available?

Critical during emergency recovery situations

Integration

How well does it work with current systems?

Reduces complexity and management overhead

Test restore procedures with potential providers during evaluation periods. Many services offer free trials that let you test backup and restore capabilities with real data before making commitments.

Request references from organizations similar to yours and review case studies that demonstrate successful implementations. Provider reputation and track record matter significantly for services that protect your most critical assets.

When comparing advanced features, ask whether immutability, anomaly detection, and application-aware backups are supported for your exact workload. Check which features require an additional plan, configuration, or separate tool.

Compare the total cost and operational work of local, cloud, and hybrid options. Include staff time, restore testing, retention growth, and recovery costs rather than assuming cloud adoption always reduces the bill.

Backup and disaster recovery services can overlap, but restoring stored data and failing over a running service require different capabilities. Confirm the recovery method, dependencies, and tested recovery time instead of assuming near-instant failover.

A provider’s suitability depends on whether it can protect and restore your data under the conditions you expect. Use a documented restore test and a clear service scope to support that decision.

Use the evaluation to identify gaps in your current protection and decide which service or combination of tools addresses them. Assign responsibility for monitoring backups, maintaining access, and testing recovery.

Where Hivenet fits in a backup plan

Store with Hivenet can hold an additional copy of selected files alongside other storage or backup tools. The secondary-copy guidance describes that role. Choose the product and recovery workflow for your needs rather than treating all Hivenet storage as a managed system-backup service.

Check the plan and workload

Review the current Store plans and features for personal file storage. Compare capacity, billing terms, and the tools you need to create and recover copies. Consumer storage pricing does not establish the cost of a complete business backup system.

Understand the security model

Store encrypts files, divides them into fragments, and distributes them across Hivenet’s storage infrastructure. Hivenet also states that it does not use Store files to train AI. Review the security information and the distinction between security and data privacy without assuming undocumented key-ownership or zero-knowledge guarantees.

Confirm support arrangements

Check the support channels and service terms available for the product you choose. If recovery is time-critical, confirm the assistance available and test the process before relying on it. Do not assume a guaranteed response or recovery time.

Separate personal and business storage

Store is designed for personal and everyday files. For backup sets, application data, or other business workloads, evaluate the separate Hivenet Object Storage service and its supported S3-compatible tools. Confirm workload fit and access arrangements with Hivenet; storage compatibility alone does not establish managed backup or system-recovery capabilities.

Check supported platforms

The current download page lists macOS, iPhone, iPad, and Android apps, plus desktop web access. There is no current Windows or Linux app, and legacy desktop apps no longer receive updates or support. Use the Hivenet FAQ for general questions, and verify the workflow on your own devices.

Plan and test recovery

Choose how to create copies, retain older versions, and test restoration. Hivenet’s archival guidance discusses external tools for retaining versions. That guidance does not establish native incremental or differential backup jobs, a built-in scheduling console, or recovery monitoring in Store. Confirm any additional backup software and its supported connection before use.

Use Hivenet as one part of a backup plan whose coverage, retention, access, and recovery process you have verified. Keep an independent copy where your risk assessment requires one.

Final Thoughts

Start by evaluating your current backup strategy—or lack thereof. Identify critical data that requires protection, estimate your storage requirements, and test a few providers with free trials. The peace of mind that comes from knowing your data is secure and recoverable is worth far more than the monthly service cost.

Your business depends on your data. Make sure your data doesn’t depend on luck.

Frequently Asked Questions (FAQ)

What is cloud backup and how does it work?

Cloud backup creates remote copies of selected data for recovery. Backup software may run on a schedule or capture changes more frequently. Check which data is included, whether jobs complete successfully, and which retained copies you can restore.

What are the main differences between incremental and differential backups?

Incremental backups save only the data that has changed since the last backup (either full or incremental), using less storage space and completing faster. Differential backups save all changes made since the last full backup, requiring more storage but simplifying the restoration process by needing only the last full and latest differential backup. Differential backups accumulate changes without resetting, providing a simpler restoration process.

How often should I perform full backups?

Use a schedule supported by the backup product and appropriate to your data and recovery needs. Some workflows use periodic full backups, while others use an initial full backup followed by incrementals. Check retention and restore requirements before choosing a frequency.

What is Recovery Point Objective (RPO) and Recovery Time Objective (RTO)?

RPO defines the maximum acceptable amount of data loss measured in time (e.g., last one hour of data), guiding backup frequency. RTO specifies how quickly your systems must be restored after a disruption to avoid significant business impact, guiding recovery strategies. Recovery Point Objective (RPO) refers to calculating how much data loss a company can experience within a period before significant harm occurs from the point of a disruptive event to the last data backup.

Can cloud backup protect against ransomware?

It can help if you retain a usable copy from before the attack and prevent that copy from being changed or deleted. Keep protected copies, such as offline backups or appropriately configured immutable storage, and test restores. A backup label alone does not guarantee clean recovery.

Is cloud backup secure?

Security depends on the service and configuration. Check encryption in transit and at rest, key management, account protection, and recovery controls. Encryption does not by itself mean the provider has no access to decryption keys.

What happens if I lose internet connectivity during backup?

A connection loss can interrupt a transfer from your device. Check whether the software retries or resumes, and confirm completion when connectivity returns. Data that has not reached a usable backup remains outside that recovery point.

How much storage space do I need for cloud backup?

Storage needs vary based on the amount of data, backup frequency, and retention policies. Incremental backups use less space by saving only changed data, while differential backups require more space but allow faster restores. It’s best to choose a scalable plan that grows with your data.

Can I access my backed-up data from any device?

That depends on the provider’s supported apps, browser access, permissions, and restore format. Verify file access on the devices you need, and test system restoration separately. Not every backup can be restored from any device.

What is the 3-2-1 backup rule?

The 3-2-1 rule recommends keeping three copies of your data on two different storage types, with one copy stored offsite. Cloud backup naturally fulfills the offsite copy requirement, complementing local backups for comprehensive data protection.

How long does it take to restore data from cloud backup?

Restore time depends on the amount of data, internet speed, and backup type. Differential backups generally allow faster restores than incremental backups because fewer backup files are needed. Some providers offer options to expedite recovery, such as physical data shipment.

Can I backup entire systems or just files?

Some products support image or system backups; others protect only selected files or application data. Confirm whether the service covers the operating system, applications, settings, and required restore environment. Do not infer system recovery from file-storage support.

Are cloud backups compliant with industry regulations?

Compliance depends on the data, applicable requirements, contracts, controls, and how the service is configured and used. Review relevant assurance reports and other evidence with your security or privacy team. A provider’s reputation or certification claim is not enough on its own.

What should I look for when choosing a cloud backup provider?

Consider factors such as security features, backup and restore speed, storage scalability, pricing, compliance certifications, customer support quality, and integration capabilities with your existing systems.

Can cloud backup help with business continuity?

Cloud backup can support business continuity by making recovery copies available. Restoring operations also depends on people, systems, credentials, infrastructure, and a tested recovery plan. A backup subscription does not guarantee minimal downtime.

How do incremental and differential backups affect backup performance and storage?

Incremental backups reduce backup time and storage space by saving only changes since the last backup but may increase restore time. Differential backups require more storage and longer backup windows but simplify and speed up the recovery process.

Is it possible to automate cloud backups?

Many backup products support scheduled jobs, but available backup types and controls vary. Configure the supported workflow, monitor failed jobs, and test restoration. Automation does not remove the need to check that your data is recoverable.

What happens if my data grows rapidly?

Choose a cloud backup provider with scalable storage plans that accommodate increasing data volumes without penalizing you with excessive costs or performance degradation, ensuring your backup strategy remains effective over time.

How do I test if my cloud backup is working correctly?

Regularly perform restore tests using non-critical data to verify backup integrity and recovery processes. Many providers offer tools and reports to monitor backup status, alerting you to any failures or issues.

Can I backup data from cloud applications like Microsoft Office 365 or Google Workspace?

Yes. Specialized backup solutions exist to protect cloud applications, capturing emails, documents, calendars, and contacts to prevent data loss beyond the native retention policies of these platforms.

What is continuous data protection (CDP)?

CDP captures and backs up data changes in real-time or near-real-time, reducing the recovery point objective to minutes or seconds and minimizing potential data lost during failures, ideal for mission-critical systems.

How do I ensure minimal downtime during recovery?

Define the recovery-time target for each service and test the full process, including access, data transfer, system rebuilds, and validation. More frequent backups can reduce the data-loss window, but do not by themselves make restoration faster.

Can I backup mobile devices?

Check the provider’s support for your mobile operating system and the data types it can access. Photo or file backup does not necessarily include app data, device settings, or a complete device restore.

How does cloud backup handle versioning?

Where supported, versioning retains earlier copies under a defined retention policy. Recovery requires a usable version from before the unwanted change that has not expired or been deleted. Confirm the version limits and test how to restore one.

What is the difference between cloud backup and cloud storage?

Cloud storage provides a place to keep and access data; a backup workflow maintains recoverable copies. Some storage services include versioning or automation, but features vary. Check retention, deletion behavior, and restoration instead of relying only on the product label.

How do I avoid vendor lock-in with cloud backup?

Choose providers offering standard data export formats and open APIs, making it easier to migrate your backups to another service if needed. Regularly test data export procedures before committing long-term.

Can cloud backup reduce costs compared to traditional backup?

It can, but compare total costs for your workload. Include subscriptions, any backup software, local copies, administration, and applicable transfer or retrieval charges. Test recovery as part of that comparison rather than assuming cloud backup is always cheaper.

What is the impact of backup on network performance?

Backups consume bandwidth during data transmission. Use bandwidth throttling and schedule backups during off-peak hours to minimize impact on normal business operations.

How do I handle data sovereignty concerns?

Review where backup data is stored, including replicas and subprocessors, along with contractual and transfer arrangements. A data-center location alone does not establish compliance with every applicable requirement.

Can cloud backup protect against accidental deletions?

You can recover a deleted file if the backup captured it and retains a usable copy. Check deletion propagation, trash and version retention, access requirements, and restore steps before relying on that protection.

How do I get started with cloud backup?

Start by identifying critical data, estimating storage needs, and testing a few providers with free trials. Implement a backup strategy that fits your budget and recovery objectives, and regularly monitor and test your backups to ensure ongoing protection.

Your next workload belongs on Hivenet.

Pick one AI, compute, or storage workload and see the difference for yourself. Spin it up in minutes, or let our team map your fastest path to production.

Shader gradient background