Service · Backup and recovery

Cloud backup

Suppose you run a dental practice in Maribor. Patient records, X-ray images and bookings sit on a server in the room behind reception, and every night a copy goes to a NAS on the shelf next to it. That covers a failed disk. Against fire, burglary, flooding or ransomware that scrambles all networked devices overnight it is useless, since the server and the NAS go down together. Real protection needs at least one copy in another place that cannot be reached from your network. With this service we place that copy in an EU data centre. Encryption happens on your premises before anything is sent, copies cannot be erased during an agreed window, and the storage account is opened in your company's name. We use only providers and regions within the EU, which also makes the GDPR assessment simpler. That the copy really comes back is shown by regular, documented restore tests.

EU only
European providers and EU regions
Encrypted at source
the key stays with you
Deletion lock
for the full agreed period
Your account
contract directly with the provider

Scope of the service

The cloud copy sits alongside your local backup; it does not take its place. Local means quick restores, cloud means surviving the loss of the premises.

Check the scope with an engineer

EU location

European providers such as Hetzner, OVHcloud and IONOS, or Azure, AWS and Google Cloud in their EU regions. We do not use providers or regions outside the EU. Since backups frequently contain personal data, this makes the assessment you and your DPO complete beforehand much simpler.

Account in your name

The storage account belongs to your company and the provider bills you directly. We are granted only the permissions our work requires. Should you ever change IT partner, the backups stay exactly where they are.

Encryption at source

Data is encrypted before it leaves your network. Without the key nobody can read the content, the provider included. The key's location is written down and verified during each test.

Deletion lock

With S3-compatible storage, the Object Lock feature stops backups from being deleted or changed during the agreed period, even with stolen admin credentials. The lock length is aligned with your retention rules and GDPR obligations.

Initial upload

On most connections upload speed is well below download speed. The first full copy is sent overnight and at weekends; after that only changes travel.

All the costs

Beyond the price per terabyte we include API request fees and the egress charges some providers add for pulling data out, so an emergency restore never triggers an unexpected invoice.

Starting up in the cloud

Should the office be out of action, critical systems can be booted as temporary virtual machines with the same provider, and staff keep working from home or elsewhere.

How the work runs

Set-up takes a few days. How long the first upload will take is calculated in advance from your data volume and upload speed.

01

Calculation

From data volume, retention rules and upload speed we work out the monthly storage cost and the duration of the first upload.

02

Account and storage

A company-owned account, a storage bucket, encryption, the deletion lock and narrowly scoped access keys.

03

First upload

Data moves after hours, or throttled in daytime, so nobody in the office feels the line slow down.

04

Test and handover

A sample of the backup is brought back in a sealed-off test setting and timed; you then receive the recovery plan and a note on where the key is stored.

The lock has to outlast an attacker's patience. Intruders often stay inside a network for weeks before triggering encryption, and use that time to delete or infect backups. If you keep copies for only seven days, every one of them may be compromised by the time the attack is noticed. So we set lock and retention in the cloud to reach far enough back, and keep older monthly restore points as well. During testing we confirm that at least one of them is definitely clean.

Your questions answered

Backups hold everything, including personal data of customers and staff. With EU providers and regions most questions about transfers to third countries simply do not arise. The legal assessment is yours to make with your data protection officer or adviser; we provide the facts about where data sits, how it is encrypted and who can reach it.

Upload speed is what counts. 500 GB at 50 Mbit/s takes around 22 hours of uninterrupted transfer. Once that is done, daily uploads shrink to the changes, usually just a few gigabytes. We run the numbers with your figures.

It depends on download speed and on whether systems are restored to you or started in the cloud. 1 TB at 300 Mbit/s needs roughly seven to eight hours to come down, then services have to be started. Running them as virtual machines at the provider is often quicker, because nothing has to travel back first.

Never solely on the server being backed up, because ransomware would encrypt it along with everything else. We store it in at least two places, for instance the company password manager and a sealed envelope held by the managing director. At each test we confirm it can be found and that it works.

You pay for storage directly to the provider, and we calculate the amount beforehand from your data volume and retention periods. Set-up and upkeep are billed at €50 per hour plus VAT or included in the Start, Business and Premium plans.

Get a copy out of the building

Send us your data volume, upload speed and the systems to protect, and we will work out the monthly cost and the length of the initial upload.

When we work
Weekdays 9:00-17:00 CET, answers the same or next working day
Calls
Video meetings, Teams and Meet both welcome

We set essential cookies only: the ones that keep the site running and recall which town you chose. Nothing for ads and nothing that follows you around the web. Details are in our privacy and data protection notice.