Most DLP solutions provide monitoring for Web Upload. It can be done in two ways: agent-based module can control what is going to be uploaded and/or network module that is usually connected to the proxy server via iCAP does the same 

Of course you have to choose between on-prem and cloud. Cloud setup looks simpler but you need to think how to pass SaaS into your network and what data would be stored outside your network. On-prem could provide more scenarios including hardware brute-forcing and air-gapped…

Commvault and Veeam

Antivirus and DLP are separate products even for vendors that provide both. Of course you need to understand what DLP features comply you best There are three common approaches: 1) DLP by content. Classical DLP Suites utilize fingerprinting (Forcepoint, McAfee, GTB,…