Small business backup · ransomware recovery · restore testing Backups you've actually tested — before you need them.

Small business backup for offices in the US and Australia: encrypted copies, an offline copy ransomware can't touch, and a restore test every month so you know — not hope — that you can recover.

  • Restore tested monthly
  • Immutable copy
  • One-page recovery plan
Sound familiar?

Everyone has backups. Few have restores.

  • “We have backups. Nobody has tried a restore.”

    Most failed recoveries are discovered on the worst day — when the backup turns out to be incomplete or months old.

  • “Ransomware would end us.”

    Attackers go after backups first. If every copy is online and writable, they can encrypt those too.

  • “Our cloud backup bill grows every year.”

    Storage keeps growing and so does the invoice — while the restore speed stays slow.

How we see it

From 'we think we're covered' to proof on paper

Disaster recovery for small offices, done the way the Essential Eight and every security guide recommends.

  1. Step 01

    Listen

    We list what you can't lose — files, email, databases, line-of-business apps — and how long you can afford to be down.

  2. Step 02

    Map

    We design 3-2-1: three copies, two kinds of storage, one offline and immutable that ransomware can't change.

  3. Step 03

    Build

    Encrypted backups run automatically, the offline copy rotates on schedule, and we write a one-page runbook your team can follow at 2am.

  4. Step 04

    Run

    Every month we restore real files and check every one by hash. You get a health score and a dated report.

What we build

Four disaster recovery routines we set up

Small business backup is never just software — it's a routine. These are the routines we set up.

Project 01

Backup + restore proof

Automated, encrypted backups with backup restore testing every month and a health score you can show an auditor or insurer.

  1. Nightly backup · 0 errors
  2. Monthly restore: 500 files
  3. All verified · health score 98
You get
Backup setup, monthly restore test, PDF report
Live in
Typically 1 week
  • restic
  • Backrest
  • Kopia

Project 02

Ransomware recovery readiness

An immutable backup copy attackers can't change, a one-page recovery runbook and a practice drill with your team.

  1. Immutable copy configured
  2. Runbook written · 1 page
  3. Drill: restored in 3h 40m
You get
Immutable copy, runbook, drill report
Live in
Typically 1–2 weeks
  • Kopia
  • Borg
  • Object lock

Project 03

Office PC mesh backup

Spare disk space on your office PCs becomes an encrypted, self-healing backup — no cloud bill, survives a dead PC.

  1. Agent on 12 PCs
  2. Files split + encrypted across the office
  3. 1 PC offline · restore still passes
You get
Mesh agents, admin view, restore tests
Live in
Typically 2–3 weeks
  • Syncthing
  • Erasure coding
  • Encryption

Project 04

Microsoft 365 & Google Workspace backup

Email, OneDrive and Google Drive backed up outside the vendor, encrypted — because 'it's in the cloud' isn't a backup.

  1. Mailboxes + drives exported
  2. Encrypted repo · versioned
  3. Test restore: 1 mailbox
You get
M365 / Workspace backup, restore tests
Live in
Typically 1 week
  • restic
  • rclone
  • Scheduled jobs
Under the hood

The 3-2-1 rule, proven monthly

Every guide says to test restores. Almost nobody does. We do it for you and write it down.

Encrypted end to end

Backups are encrypted before they leave the machine. Lose a disk, lose nothing readable.

One copy offline

An immutable copy that can't be changed or deleted until it expires — ransomware can't reach it.

Hash-verified restores

Every restored file is checked against its original fingerprint. Not 'it ran' — 'it's correct'.

Built on: restic (37k★) · Kopia (14k★) · Borg (14k★) · Backrest (8k★) · Syncthing (90k★)

How it sounds

What the first call sounds like

  1. Practice manager

    Our IT person set up backups years ago. I honestly don't know if they work.

  2. Ruhan

    That's the most common answer we hear. We'll restore a sample this week and tell you exactly what's covered and what isn't.

  3. Practice manager

    And if ransomware hits?

  4. Ruhan

    Then you follow a one-page plan we wrote together, and restore from a copy the attacker couldn't touch. We'll even practise it with you.

An example of a typical first call.

Working together

Three ways to start

Questions

Ransomware recovery and backups, answered

What is the best small business backup strategy?
The 3-2-1 rule: three copies of your data, on two kinds of storage, with one offline or immutable — plus a restore test every month to prove it works.
How often should we test restoring backups?
Monthly for important data. A backup that has never been restored is a guess, not a backup.
Does this help with the Essential Eight?
Yes. Regular backups, restore testing and protecting backups from change are part of the Essential Eight 'regular backups' strategy, and our reports give you the evidence.
Isn't Microsoft 365 already backed up?
Microsoft keeps the service running, but deleted or encrypted data can still be lost. A separate Microsoft 365 backup gives you your own recoverable copy.
How long does ransomware recovery take?
It depends on data size and the plan. We set a recovery target with you, then test against it in a drill.
Next step

Let's find out if your backups really work.

We'll reply within one business day and can test-restore a sample this week.

Opens your email app with your message ready to send.