Backup & disaster recovery that actually restores when ransomware hits at 3am

Backup is a copy of your data. Disaster recovery is the orchestrated plan that uses those backups to get you back to a working production state inside an agreed-upon RTO. A backup tells you the data exists somewhere. A DR plan tells you exactly which engineer is going to run which runbook on which infrastructure to have your ERP back online by 9am Monday. We deliver both as one managed service — backups that are tested every quarter via a real restore, not a green checkmark in a dashboard.

Yes, by design. Every Resilient and Enterprise plan writes to immutable storage (Veeam Hardened Repository, Datto Cloud immutable retention, Wasabi object-lock, or AWS S3 Glacier with vault lock). Once written, the backup cannot be deleted or modified — even by an admin with stolen credentials — for the configured retention window (typically 30-90 days). Ransomware that compromises your domain admin cannot reach into the backup chain. We also keep an air-gapped weekly vault for clients with regulatory requirements.

RPO (Recovery Point Objective) is how much data you can afford to lose, measured in time. RTO (Recovery Time Objective) is how long the recovery itself can take. Most SMBs assume they have 24-hour RPO from a tape that nobody has tested in 8 months. Our Resilient plan delivers 15-minute RPO for VMs on the local Datto appliance.

Three layers, every quarter. First, automated screenshot verification — every nightly backup is booted into an isolated sandbox and a screenshot of the OS login screen is captured and stored as proof. Second, file-level recovery test — we restore a randomly chosen file each month and compare hashes. Third, full DR exercise — every quarter we spin up your top 3 production VMs in our cloud, take a screenshot of the application login (not just the OS), and document the elapsed time. The report goes to your portal and your auditor.

Yes. Microsoft and Google explicitly do not back up your data — they replicate it. If a user (or attacker) deletes a mailbox, OneDrive folder, SharePoint site, or Teams channel beyond the native retention window (typically 30-90 days), the data is gone. We back up M365 mailboxes, OneDrive, SharePoint, Teams, and Microsoft Planner with unlimited retention via Veeam Backup for M365 or Datto SaaS Protection. Google Workspace uses the same products. Restoration is granular — single email, single file, single channel post.

Salesforce backup is included in the Resilient and Enterprise tiers via OwnBackup or Spanning. We can also back up HubSpot, Dynamics 365, NetSuite, ServiceNow, GitHub, GitLab, and Atlassian via API-level backup tools. Most clients don't realize Salesforce removed its native restoration service in 2020 — if a marketing operations admin runs a bad data load on a Friday, the only path to undo it is your third-party backup.

We follow the runbook we wrote during onboarding, communicate status via your preferred channel (Teams, Slack, phone tree), and document everything for the post-incident report. Enterprise tier includes an annual full-failover tabletop exercise where your executives also practice the comms side.

Yes. Our backup architecture is BAA-eligible for HIPAA (PHI is encrypted in transit and at rest with customer-managed keys available), produces SOC 2 evidence automatically (immutability proof, restore-test logs, RTO measurements), and meets PCI-DSS retention requirements for cardholder data environments. Evidence packets are quarterly; auditors love the screenshot-verified restore logs.

Both. Granular restore at the file, folder, mailbox, mailbox-item, database table, or VM level. We can mount a backup as a read-only volume to recover a single Word document from 47 days ago, or instantly boot a VM directly from the backup repository for full disaster recovery.