Backup & Recovery

Backup & Recovery

Your data, backed up. Your business, recoverable.

Local plus offsite, encrypted everywhere, and regularly tested — so when ransomware hits, the server dies, or someone deletes the wrong folder, you have a way back.

What’s included

Backup designed for actually using

A backup you’ve never restored from is a backup you’re hoping works. We test, document, and verify — so the restore is boring, not heroic.

Server & endpoint backup

Image-level backups of servers, plus file-level coverage on workstations where it matters. Captured on a schedule that fits your change rate.

Local + offsite copies

A copy on-site for fast restores, plus replicated copies in Datto’s Canadian cloud — primary in Toronto, secondary in Montreal. Local fire, theft, or flood doesn’t take your backup with it.

Encrypted in transit and at rest

AES-256 encryption end to end. Even if a backup ends up somewhere it shouldn’t, the contents aren’t readable.

Microsoft 365 backup

Microsoft doesn’t back up your M365 data the way most people assume. We do — mail, OneDrive, SharePoint, Teams — so deleted-by-mistake or compromised mailboxes are recoverable.

Ransomware-resistant

Offsite copies are isolated from your production network so ransomware can’t reach them. Snapshots are immutable — encrypted-on-disk attacks can’t overwrite earlier good copies.

Restore testing

We test restores on a regular cadence — not just on a calendar. A backup that’s never restored from is a backup you’re hoping works. We make sure it does.

Documented recovery

Written restore procedures for each system — what to spin up first, what depends on what, who to call. Your DR plan doesn’t live in someone’s head.

Retention managed

How long do you need yesterday’s backup? Last month’s? Last year’s? Retention policies tuned to your compliance and operational needs, not a one-size-fits-all schedule.

How we work

Design, deploy, then keep proving it works

Most backup failures aren’t software bugs — they’re “we never tested it” or “we backed up the wrong thing.” We design around that.

1

Design

We map what you actually need to recover — and how quickly — versus what’s just nice to have. That drives backup frequency, retention, and where copies live. You get a written plan before any gear is deployed.

2

Deploy & seed

Backup appliances installed, agents rolled out, initial backups captured. For sites with limited bandwidth, Datto supports seeding the first backup to a shippable drive — we can arrange this where the over-the-wire option isn’t practical.

3

Monitor & test

Daily backup status reviewed, failures triaged. Restore tests run on a regular cadence with documented results. Recovery procedures kept current as your environment changes.

FAQ

Questions we hear a lot

Anything not covered here? Email us and we’ll answer.

How quickly can we recover from a server failure?
Honest answer: it depends. File-level restores from yesterday are fast. Recovering a full server image from offsite over a slow internet link is slower. Recovery time targets are something we’d scope as part of designing your backup plan — based on the size of what’s backed up, available bandwidth, and what you’re willing to invest in faster recovery options (like a standby appliance that can spin up a virtualised server locally).
Do you back up our Microsoft 365 data?
Yes — and you should care about this even if you’re not asking. Microsoft’s M365 service agreement is explicit: their job is keeping the service running. Recovering data your team accidentally deleted, or that was wiped by a compromised account, is your problem. We back up M365 mailboxes, OneDrive, SharePoint, and Teams data so that’s not a problem anymore.
What if ransomware encrypts our backups too?
This is exactly what modern attackers go after — wiping your backups before encrypting your production data so you have no choice but to pay. Our offsite copies are network-isolated from your production environment, and snapshots are immutable: once written, they can’t be overwritten or deleted, even by a compromised admin account. Ransomware can’t reach what it can’t see, and can’t rewrite what’s locked.
How often do you test restores?
On a regular cadence — typically a mix of automated verification (the backup software boots the image and confirms it’s valid) and manual restore tests for selected systems. The exact frequency depends on the criticality of each system. The point isn’t theatre — it’s catching problems before you actually need the backup.
Is everything encrypted?
Yes. AES-256 encryption both in transit (between the source and the backup target) and at rest (on the appliance and in the Canadian cloud copies). Encryption keys are managed so we can recover your data — but a stolen appliance or intercepted backup stream is unreadable without them.
What about the initial backup over a slow link?
For sites with limited bandwidth — common in the North — Datto supports seeding via an encrypted shippable drive, then moving to incremental backups over the wire after that. We can arrange this where bandwidth makes the over-the-wire option impractical. Same approach in reverse for large restores where waiting on a download isn’t realistic.
How does pricing work?
For most clients, backup is included as part of our managed IT services — bundled into the monthly fee so coverage isn’t optional. Larger clients with on-premise servers typically get a Datto BCDR appliance onsite for fast local recovery, with off-site replication included. Standalone backup-only engagements are something we can scope on request. Email us with a description of your environment and we’ll fit a plan to it.

Let’s pressure-test your backup plan.

Most backup plans look fine on paper and fail when you actually need them. Email us — we’ll review what you have today and tell you honestly where the gaps are.