Cloud backup & disaster recovery

Backup is the copy. DR is the recovery.

Cloud-to-cloud backup for Microsoft 365 and Google Workspace, plus optional appliance-based disaster recovery with five-minute RPO and instant virtualisation. Onshore in Australia, geo-redundant, screenshot verified, and tested quarterly. Engineered for ransomware-era Australia where backups are no longer enough on their own.

5 min RPO with appliance DR
Onshore AU data residency
3x daily SaaS backup minimum
0% ransomware loss across our base
5 min
Recovery Point Objective with our appliance-based DR offering.
99.99%
Data durability target across our geo-redundant backup tier.
Quarterly
Formal restore tests with documented runbooks for DR clients.
0%
Ransomware-driven data loss across our managed client base.
The business case

Why backup and DR can't sit in the too-hard basket.

Cyber insurance premiums are rising. The Australian Privacy Act is tightening. Ransomware is no longer a vendor's problem; it's a board-level question. Most Australian SMBs are one user mistake or one supply-chain compromise away from a hard week, and recovery time directly determines how hard the week is. If you have never put a figure on it, our downtime cost calculator prices an outage using your own salary, overhead and revenue numbers.

Ransomware is a recovery problem.

Modern ransomware actors specifically target backups before they encrypt production data. An immutable, off-network copy is no longer optional. The only honest answer to "how long until you're operational?" is the one your DR architecture can actually deliver.

Cloud SaaS is not self-backing.

Microsoft 365 and Google Workspace operate a shared responsibility model. The vendor protects the platform; you protect the data. Accidental deletion, retention policies, departing staff and ransomware all sit on your side of the line.

Compliance increasingly demands proof.

Insurers, auditors and regulators no longer accept "we have backups" as evidence. They want documented restore tests, retention policies that meet the relevant standard, and evidence that the controls actually work in production.

SaaS data protection

Cloud-to-cloud backup for Microsoft 365 & Google Workspace.

An independent, encrypted copy of every important workload you run in Microsoft 365 and Google Workspace, stored in geo-redundant infrastructure outside the platform itself. Three automated backups per day at minimum, point-in-time restore, granular recovery, and unlimited retention available. Included as standard in every synfo managed services tier.

Exchange Online & Gmail

Every mailbox protected, including emails, attachments, contacts, calendars, tasks and rules. Recover a single message, a folder or an entire mailbox to a point in time before the incident.

OneDrive & Google Drive

Personal file storage backed up file-by-file, with version history retained. Departing staff, accidental deletion and mass overwrites all become reversible events instead of incidents.

SharePoint & Shared Drives

Document libraries, site collections, lists, permissions and metadata all captured. Restore individual items, entire libraries or full sites without round-tripping through support tickets.

Microsoft Teams

Channels, conversations, files, tabs and team membership protected at the workspace level. The data that the platform's own retention policies don't always cover the way you'd expect.

Ransomware-resistant by design

Backup data lives outside the production tenant in an independent cloud, behind separate credentials and multi-factor authentication. Encryption of your live tenant cannot reach the backup copy.

Point-in-time restore

Roll any mailbox, drive, library or workspace back to a specific snapshot in time. The right answer for ransomware events, departing-staff disputes and any "what did it look like last Tuesday" question.

Capabilities included as standard

The detail behind what gets protected and how recovery actually works.
  • 3x daily automated backupMinimum cadence, configurable up
  • Unlimited retention availableMatch your compliance posture
  • Granular restoreSingle item up to full workspace
  • Cross-user restoreReassign data when staff depart
  • Searchable backup indexFind a specific item in seconds
  • Export to PST/MBOXFor legal hold or eDiscovery
  • AES-256 encryptionAt rest and in transit
  • Onshore Australian storageSovereign data, geo-redundant
The shared responsibility model

What the cloud vendor protects, and what they don't.

Both Microsoft and Google publish a shared responsibility model. They protect the infrastructure: hardware uptime, geographic redundancy of their datacentres, platform-level resilience. You are responsible for your data: who can access it, how long it stays, how you recover it when something goes wrong on your side of the line.

What the platform vendor covers.

Underlying service availability, redundant datacentre infrastructure, replication between regions for the platform's own resilience, and basic recycle-bin recovery within short, vendor-defined retention windows. Their job is to keep the service running for everyone.

What sits on your side of the line.

Accidental deletion past the recycle-bin window. Malicious deletion by a disgruntled user or compromised account. Ransomware encryption of synced files. Departing staff data. Long-term retention for legal or compliance reasons. Restoring a specific point in time before a problem occurred.

Why an independent copy matters.

Native platform tools assume you'll know something is wrong inside their retention window, which is rarely how real incidents unfold. Discovery happens weeks or months after the fact. An independent, vendor-separate backup gives you the timeline depth that native tools don't.

Optional add-on, à la carte

Appliance-based business continuity & disaster recovery.

For organisations running on-premise servers, virtual machines, line-of-business applications or production workloads outside the public cloud, an appliance-based BCDR platform is the difference between a recoverable incident and a multi-day outage. Available as a standalone à la carte service to any Australian business, whether you're on a managed agreement with us or not.

Image-based local backup

Full image snapshots of every protected server, not file-by-file copies. The entire operating system, applications, configuration and data captured as a bootable unit, with deduplication and compression built in.

Five-minute RPO

Backup intervals as tight as every five minutes for critical workloads. The amount of data the business can afford to lose, expressed in minutes rather than hours or days.

Instant virtualisation

If a protected server fails, the most recent backup boots as a virtual machine directly on the appliance in minutes. Production keeps running on the recovery copy while the original is repaired or rebuilt.

Screenshot verification

Every backup is automatically test-booted in an isolated sandbox and a screenshot of the running operating system is captured as proof. Untested backups are not backups; this turns verification from a quarterly exercise into a routine one.

Hybrid local + cloud

Backups live on the local appliance for fast restore, and replicate offsite to geo-redundant Australian cloud infrastructure for protection against site loss. Two copies, two locations, by default.

Cloud failover

If the entire site is unavailable, the latest backup boots in the cloud and users connect remotely while we restore the office. Office burns down, business keeps running.

Bare-metal & file-level restore

Recover a full server back to original hardware, dissimilar hardware or a hypervisor of your choice. Or restore a single file. Same backup, every option.

Ransomware detection

The platform continuously analyses backups for tell-tale ransomware patterns, flags suspicious change rates, and notifies before encryption sweeps the environment. The first sign of trouble shows up in the backup logs, not the support queue.

Quarterly tested DR

Formal restore tests every quarter, run against a documented runbook, with results reported back to leadership. Insurance questionnaires and audit committees get evidence, not assertions.

How the appliance fits in your environment

Right-sized to your workload, deployed on-site or hosted in our racks.
  • Sized to your workloadFrom single-server SMB to multi-site
  • Physical or virtualHardware appliance or virtual deployment
  • Protects physical & virtualVMware, Hyper-V and bare metal
  • Application-awareSQL, Exchange, AD, file servers
  • AES-256 end-to-endOn the appliance and in cloud replica
  • Immutable cloud copyHardened against ransomware tampering
  • Configurable retentionFrom days to years per workload
  • 24/7 vendor backingReplacement appliances overnight
The full backup architecture

A layered 3-2-1 posture, by default.

The 3-2-1 rule has been the industry standard for decades, and it still works. Three copies of your data, on two different media, with one copy offsite. Our standard architecture meets or exceeds that rule for both cloud SaaS data and on-premise infrastructure, without any client-side complexity.

  1. 01

    Production copy

    Your live data in Microsoft 365, Google Workspace, on your servers or in your cloud workloads. This is the copy that gets used every day, protected by the platform's own resilience and by access controls inside the environment.

  2. 02

    Independent backup copy

    An automated backup of every protected workload, stored outside the production environment in an independent system with separate credentials and multi-factor authentication. Ransomware that reaches production cannot reach this copy.

  3. 03

    Geo-redundant offsite copy

    A further replicated copy in geo-redundant Australian cloud storage. Site loss, regional outage, hardware failure or appliance theft all become recoverable events because the offsite copy is intact, encrypted, and immutable.

  4. 04

    Tested restore capability

    The fourth copy is the one that matters: the proof that recovery works. Screenshot-verified backups, scheduled restore tests, documented runbooks and quarterly reports turn "we have backups" into "we have tested DR".

Choosing the right protection

SaaS protection vs appliance DR.

Most Australian SMBs need both, sized to what they actually run. SaaS Protection covers everything in Microsoft 365 or Google Workspace. Appliance DR covers everything on-premise or running outside public SaaS. Here's how they compare side-by-side.

Compliance & data sovereignty

Built for Australian regulatory reality.

Every backup we hold for an Australian client is stored in Australian datacentres, encrypted with AES-256, and accessible only to the named engineers required to operate the service. The architecture is aligned to the controls Australian businesses are increasingly required to demonstrate.

ASD Essential 8 alignment

Backup is one of the eight mitigation strategies in the Australian Cyber Security Centre's Essential 8. We map your backup posture to the relevant maturity level and lift it where required, with documented evidence.

Privacy Act & APP readiness

Backup retention configured to your obligations under the Australian Privacy Act and Australian Privacy Principles. Documented evidence for the regulator, the board and your insurer.

ISO 27001 & cyber insurance

Backup, restore testing, retention and incident recovery are core ISO 27001 controls and standard cyber-insurance questions. Our service produces the evidence trail those frameworks demand.

Frequently asked

Common questions on backup and DR.

The questions our prospects, their boards, their auditors and their insurers ask. Honest answers.

  1. Q1

    Doesn't Microsoft already back up my Microsoft 365 data?

    No. Microsoft operates a shared responsibility model. They protect the infrastructure; you protect the data. Microsoft does not protect Exchange, SharePoint, OneDrive or Teams against accidental deletion past short retention windows, malicious deletion, ransomware encryption or long-term compliance retention requirements. A third-party, cloud-to-cloud backup is essential.

  2. Q2

    What is the difference between cloud backup and disaster recovery?

    Backup is the copy. DR is how fast you can run on that copy when the original is gone. Cloud backup protects data; disaster recovery protects the business. A serious resilience posture combines both: cloud-to-cloud backup for SaaS data, and appliance-based or cloud-based DR for servers and infrastructure workloads.

  3. Q3

    What is RPO and RTO, and what should mine be?

    RPO is how much data you can afford to lose, measured in time. RTO is how long the business can wait before systems are restored. Our standard cloud-to-cloud backup runs three times per day; our appliance-based DR achieves an RPO as tight as five minutes and an RTO measured in minutes through instant virtualisation. The right targets for your business depend on your tolerance for downtime; we map this in your initial audit, and our downtime cost calculator gives you a first-pass figure in about a minute.

  4. Q4

    Where is the backup data stored?

    Onshore in Australia, in geo-redundant data centres, with AES-256 encryption at rest and TLS in transit. No data leaves the country without explicit client direction. Backup data sits behind multi-factor authentication and role-based access control, separated from production credentials so that a compromise of the live tenant cannot reach the backup.

  5. Q5

    Do you test the backups, or just take them?

    Both. Appliance-based DR backups are screenshot-verified after every backup, meaning the system automatically attempts to boot the backup image in an isolated sandbox and captures proof it works. We also run formal restore tests quarterly with documented runbooks, and report the results to clients in plain English.

  6. Q6

    Can I get the DR appliance without taking your managed services agreement?

    Yes. Appliance-based DR is available as a standalone à la carte service to any Australian business. We design, supply, deploy, monitor and quarterly-test the platform whether you're on a managed services agreement with us or with another provider.

  7. Q7

    How long does it take to restore after ransomware?

    For appliance-protected workloads, the most recent clean snapshot can boot as a virtual machine on the appliance in minutes, so production keeps running while we rebuild the original. For SaaS data, granular restore back into the tenant typically takes minutes to hours depending on the volume. The honest answer for any specific environment comes out of the DR design exercise.

Find out how recoverable your business actually is.

Start with a free backup and DR audit. We'll review what you currently have in place, where the gaps are, and the right-sized architecture to close them. No commitment, no sales pressure, no offshore handoff.