§services Security & Strategy cloud backup

Backups that actually come back.

Backup that runs, and restores that work when you need them.

the problem

Every business thinks it's backed up. Most discover they aren't when something actually goes wrong - backups that silently stopped three months ago, retention too short to recover a file deleted in error before someone noticed, or a ransomware note that wrote itself right through the backup set because the storage wasn't immutable. Microsoft 365 doesn't back itself up either; that's your responsibility, not theirs.

How we do it.

We run immutable, encrypted cloud backup for endpoints, servers, and SaaS (Microsoft 365, Google Workspace). "Immutable" matters - it means the backup can't be altered or deleted by ransomware, a disgruntled admin, or an accidental rm-rf, even with valid credentials.

Geographic separation is default: UK primary, EU secondary. Encryption is applied client-side with keys you control, so even if our provider gets breached they have ciphertext and nothing else. Retention is configurable up to seven years - longer for regulated clients.

Every client gets a documented restore test, at least once a year, in writing. Your insurer will ask. Your auditor will ask. Your replacement-IT will ask. A backup you've never restored isn't really a backup - it's a hope.

What's included.

  • Immutable, encrypted backups · endpoint, server, M365 / Google Workspace
  • 3-2-1-1 backup architecture - three copies, two media, one off-site, one immutable
  • Client-side encryption · keys under your control
  • UK primary storage + EU secondary for geographic redundancy
  • Configurable retention · 30 days to 7+ years
  • Annual tested restore · documented, handed to you
  • Ransomware-resistant by design - immutability + out-of-band credentials
  • On-site seeding option for large initial backup sets

What you get out of it.

  • A backup you can actually prove works - tested, documented, dated
  • Cyber-insurance-ready: meets the backup clauses of every UK SME policy we've seen
  • Ransomware survivability - we've restored clients from scratch without paying
  • M365 data recoverable beyond Microsoft's 30-day retention window

Who it's for.

Every client, frankly. Particularly critical for regulated clients, clients with a cyber-liability policy, and anyone running a line-of-business application whose data isn't already replicated.

How it's priced.

Priced per endpoint and per TB of backed-up data. Microsoft 365 / Google Workspace backup is priced per user. All pricing is flat monthly - no egress charges, no per-restore fees.

Transparent quote within 48 hours of a free on-site consultancy visit. No pre-purchased bundles of hours. No surprise overage invoices.

Things people ask.

01 Isn't Microsoft 365 already backed up?

No. Microsoft replicates for their own resilience and keeps a short retention window for deleted items, but they are very clear that customer data backup is the customer's responsibility. If an employee leaves, is malicious, or makes an honest mistake, and you notice four months later, Microsoft cannot help - a third-party backup can.

02 What does "immutable" mean in practice?

It means that once a backup is written, it cannot be modified or deleted for a defined retention period - not by ransomware, not by a disgruntled admin, not by a compromised account. Even a fully-trusted attacker with our credentials couldn't wipe the backups. This is what makes the backup a genuine recovery path after a ransomware event.

03 How long will a restore take?

Depends on size and what you're restoring. Single-file M365 restores are minutes. A full workstation restore from cloud is hours over a decent connection. A full on-premise server from cold is typically half a day. For large datasets we can ship an encrypted drive.

04 What happens to our data if we leave?

You get your data back. Full export to a drive we send, or a handover to your new provider with the keys. No hostage clause. If you've ever had to fight a previous provider for your own data on the way out, you'll appreciate that's written into our contract.

§ relatedalso in security & strategy

While you're here.

all services →
§ 05the easy part

Call us. We'll answer.

Fifteen minutes on the phone, or a free on-site consultancy visit - no obligation. We'll tell you plainly whether we're a fit, either way.