Real backups that survive ransomware, hardware failure, and the day someone deletes the wrong folder. Plus a written recovery plan, so you know exactly what happens when something goes wrong.
Get a backup plan →When we audit a new client, we almost always find at least one of these: the backup hasn't actually run in months, the backup includes things you don't need but misses things you do, the only copy lives on a USB drive plugged into the server (which ransomware also encrypted), or the backup software was set up once and nobody's checked it since.
A real backup follows the 3-2-1 rule: three copies of your data, on two different types of media, with at least one copy off-site. It runs automatically, gets monitored, and gets tested. And it's designed so a ransomware attack on your main systems can't reach the backup — immutable storage, separated credentials, isolated networks.
We design backup systems that survive the realistic scenarios — ransomware, accidental deletion, hardware failure, theft, fire, flood, and the contractor who deletes the wrong folder on a Friday afternoon. Then we test them so we know they work.
Microsoft 365 has redundancy and short-term recovery built in — but it's not a backup. If a user deletes a mailbox or a SharePoint site, you have limited time before it's permanently gone. If an attacker gets domain admin and wipes everything, Microsoft can't roll you back. If a former employee maliciously deletes data on their way out, that data is gone.
A proper third-party Microsoft 365 backup costs $3–$5 per user per month and protects against all of these scenarios. Of every cheap, high-impact thing a business with M365 can add to their setup, this is the one we recommend most often.
Tell us what you've got set up. We'll review it honestly, point out the gaps, and quote what it'd cost to fix them.