A data protection agent is installed within a virtual machine (VM). A request to freeze an application in the VM is issued to a copy service. A request for a snapshot is issued to a snapshot data mover, external to the VM. Upon receiving an identifier for the snapshot, communications are exchanged with the copy service to thaw the application, the snapshot identifier is passed to the agent thereby allowing the agent to access the snapshot and rollover data from the snapshot to secondary storage for the backup, and notification to the copy service about a success of the backup is withheld. During the rollover, listening begins for status updates concerning a progress of the rollover. Based on the status updates, the copy service is notified that the backup failed or succeeded.