A remote agent for providing data protection services includes persistent storage and a backup orchestrator. The persistent storage stores lifecycle policies. The backup orchestrator instantiates a backup agent in a client in response to a backup generation for the client, the backup generation is specified by the lifecycle policies; using the backup agent: generating a backup including backup data for the client and backup metadata that associates portions of the backup data with respective persons; and storing the backup in backup storage based on the lifecycle policies.