Cloud-to-cloud backup for Microsoft 365 and Google Workspace, plus optional appliance-based disaster recovery with five-minute RPO and instant virtualisation. Onshore in Australia, geo-redundant, screenshot verified, and tested quarterly. Engineered for ransomware-era Australia where backups are no longer enough on their own.
Cyber insurance premiums are rising. The Australian Privacy Act is tightening. Ransomware is no longer a vendor's problem; it's a board-level question. Most Australian SMBs are one user mistake or one supply-chain compromise away from a hard week, and recovery time directly determines how hard the week is. If you have never put a figure on it, our downtime cost calculator prices an outage using your own salary, overhead and revenue numbers.
Modern ransomware actors specifically target backups before they encrypt production data. An immutable, off-network copy is no longer optional. The only honest answer to "how long until you're operational?" is the one your DR architecture can actually deliver.
Microsoft 365 and Google Workspace operate a shared responsibility model. The vendor protects the platform; you protect the data. Accidental deletion, retention policies, departing staff and ransomware all sit on your side of the line.
Insurers, auditors and regulators no longer accept "we have backups" as evidence. They want documented restore tests, retention policies that meet the relevant standard, and evidence that the controls actually work in production.
An independent, encrypted copy of every important workload you run in Microsoft 365 and Google Workspace, stored in geo-redundant infrastructure outside the platform itself. Three automated backups per day at minimum, point-in-time restore, granular recovery, and unlimited retention available. Included as standard in every synfo managed services tier.
Every mailbox protected, including emails, attachments, contacts, calendars, tasks and rules. Recover a single message, a folder or an entire mailbox to a point in time before the incident.
Personal file storage backed up file-by-file, with version history retained. Departing staff, accidental deletion and mass overwrites all become reversible events instead of incidents.
Document libraries, site collections, lists, permissions and metadata all captured. Restore individual items, entire libraries or full sites without round-tripping through support tickets.
Channels, conversations, files, tabs and team membership protected at the workspace level. The data that the platform's own retention policies don't always cover the way you'd expect.
Backup data lives outside the production tenant in an independent cloud, behind separate credentials and multi-factor authentication. Encryption of your live tenant cannot reach the backup copy.
Roll any mailbox, drive, library or workspace back to a specific snapshot in time. The right answer for ransomware events, departing-staff disputes and any "what did it look like last Tuesday" question.
For organisations running on-premise servers, virtual machines, line-of-business applications or production workloads outside the public cloud, an appliance-based BCDR platform is the difference between a recoverable incident and a multi-day outage. Available as a standalone à la carte service to any Australian business, whether you're on a managed agreement with us or not.
Full image snapshots of every protected server, not file-by-file copies. The entire operating system, applications, configuration and data captured as a bootable unit, with deduplication and compression built in.
Backup intervals as tight as every five minutes for critical workloads. The amount of data the business can afford to lose, expressed in minutes rather than hours or days.
If a protected server fails, the most recent backup boots as a virtual machine directly on the appliance in minutes. Production keeps running on the recovery copy while the original is repaired or rebuilt.
Every backup is automatically test-booted in an isolated sandbox and a screenshot of the running operating system is captured as proof. Untested backups are not backups; this turns verification from a quarterly exercise into a routine one.
Backups live on the local appliance for fast restore, and replicate offsite to geo-redundant Australian cloud infrastructure for protection against site loss. Two copies, two locations, by default.
If the entire site is unavailable, the latest backup boots in the cloud and users connect remotely while we restore the office. Office burns down, business keeps running.
Recover a full server back to original hardware, dissimilar hardware or a hypervisor of your choice. Or restore a single file. Same backup, every option.
The platform continuously analyses backups for tell-tale ransomware patterns, flags suspicious change rates, and notifies before encryption sweeps the environment. The first sign of trouble shows up in the backup logs, not the support queue.
Formal restore tests every quarter, run against a documented runbook, with results reported back to leadership. Insurance questionnaires and audit committees get evidence, not assertions.
The 3-2-1 rule has been the industry standard for decades, and it still works. Three copies of your data, on two different media, with one copy offsite. Our standard architecture meets or exceeds that rule for both cloud SaaS data and on-premise infrastructure, without any client-side complexity.
Your live data in Microsoft 365, Google Workspace, on your servers or in your cloud workloads. This is the copy that gets used every day, protected by the platform's own resilience and by access controls inside the environment.
An automated backup of every protected workload, stored outside the production environment in an independent system with separate credentials and multi-factor authentication. Ransomware that reaches production cannot reach this copy.
A further replicated copy in geo-redundant Australian cloud storage. Site loss, regional outage, hardware failure or appliance theft all become recoverable events because the offsite copy is intact, encrypted, and immutable.
The fourth copy is the one that matters: the proof that recovery works. Screenshot-verified backups, scheduled restore tests, documented runbooks and quarterly reports turn "we have backups" into "we have tested DR".
Most Australian SMBs need both, sized to what they actually run. SaaS Protection covers everything in Microsoft 365 or Google Workspace. Appliance DR covers everything on-premise or running outside public SaaS. Here's how they compare side-by-side.
Best for: Microsoft 365 and Google Workspace data. RPO: Up to three times per day. Recovery model: Granular, item-level restore back into your tenant. Included: In every synfo managed services tier as standard.
Read moreBest for: On-premise servers, line-of-business applications and infrastructure workloads. RPO: As tight as five minutes. Recovery model: Instant virtualisation locally, cloud failover for site loss. Availability: Standalone à la carte for any business.
Read moreBest for: Businesses running a mix of cloud SaaS and on-premise infrastructure. Posture: Full 3-2-1 architecture covering every workload. Recovery: Right-sized RPO/RTO per system. Approach: The default we recommend for any Australian SMB with critical data in more than one place.
Read moreEvery backup we hold for an Australian client is stored in Australian datacentres, encrypted with AES-256, and accessible only to the named engineers required to operate the service. The architecture is aligned to the controls Australian businesses are increasingly required to demonstrate.
Backup is one of the eight mitigation strategies in the Australian Cyber Security Centre's Essential 8. We map your backup posture to the relevant maturity level and lift it where required, with documented evidence.
Backup retention configured to your obligations under the Australian Privacy Act and Australian Privacy Principles. Documented evidence for the regulator, the board and your insurer.
Backup, restore testing, retention and incident recovery are core ISO 27001 controls and standard cyber-insurance questions. Our service produces the evidence trail those frameworks demand.
The questions our prospects, their boards, their auditors and their insurers ask. Honest answers.
No. Microsoft operates a shared responsibility model. They protect the infrastructure; you protect the data. Microsoft does not protect Exchange, SharePoint, OneDrive or Teams against accidental deletion past short retention windows, malicious deletion, ransomware encryption or long-term compliance retention requirements. A third-party, cloud-to-cloud backup is essential.
Backup is the copy. DR is how fast you can run on that copy when the original is gone. Cloud backup protects data; disaster recovery protects the business. A serious resilience posture combines both: cloud-to-cloud backup for SaaS data, and appliance-based or cloud-based DR for servers and infrastructure workloads.
RPO is how much data you can afford to lose, measured in time. RTO is how long the business can wait before systems are restored. Our standard cloud-to-cloud backup runs three times per day; our appliance-based DR achieves an RPO as tight as five minutes and an RTO measured in minutes through instant virtualisation. The right targets for your business depend on your tolerance for downtime; we map this in your initial audit, and our downtime cost calculator gives you a first-pass figure in about a minute.
Onshore in Australia, in geo-redundant data centres, with AES-256 encryption at rest and TLS in transit. No data leaves the country without explicit client direction. Backup data sits behind multi-factor authentication and role-based access control, separated from production credentials so that a compromise of the live tenant cannot reach the backup.
Both. Appliance-based DR backups are screenshot-verified after every backup, meaning the system automatically attempts to boot the backup image in an isolated sandbox and captures proof it works. We also run formal restore tests quarterly with documented runbooks, and report the results to clients in plain English.
Yes. Appliance-based DR is available as a standalone à la carte service to any Australian business. We design, supply, deploy, monitor and quarterly-test the platform whether you're on a managed services agreement with us or with another provider.
For appliance-protected workloads, the most recent clean snapshot can boot as a virtual machine on the appliance in minutes, so production keeps running while we rebuild the original. For SaaS data, granular restore back into the tenant typically takes minutes to hours depending on the volume. The honest answer for any specific environment comes out of the DR design exercise.
Start with a free backup and DR audit. We'll review what you currently have in place, where the gaps are, and the right-sized architecture to close them. No commitment, no sales pressure, no offshore handoff.