7 Things to Know About Small Business Cloud Backup

Javi Cano

cyberfortress 7 things smb backup v2 wordpress 1200x630

Seven things decide whether small business cloud backup works: sync is not backup, protection must be automatic, coverage has to include servers and Microsoft 365, backups need to be immutable, retention matters more than capacity, a job report proves nothing, and someone has to own it.

Get those right and the brand on the invoice matters much less.

1. Sync is not backup

Google Drive, OneDrive, and Dropbox keep one live copy in sync across devices. Backup keeps many historical copies you can return to.

Sync is loyal to the current state, whatever that state is. Encrypt a file and the encrypted version arrives on every device in seconds, correctly, exactly as designed. Use sync to collaborate. Use backup to recover.

2. If it is not automatic, it will not happen

Manual backups fail on the first busy week. Automated backup solutions should run daily or continuously, retry after failures, protect laptops on any network, and push an alert to a human when a job breaks.

Every backup plan that depends on someone remembering has a date on it. It is the date that person got busy.

3. Laptops are the easy part

Most small businesses protect endpoints and stop. Files also live on a server, a NAS, Microsoft 365 or Google Workspace, and inside accounting or CRM systems. List every location before you shop, then check each one against the plan you are actually quoted.

The systems nobody listed are the ones that surface during recovery, which is the worst possible moment to learn they were out of scope. Server backup and SaaS backup are separate line items for a reason.

4. Microsoft 365 is not backed up for you

Microsoft protects its own infrastructure. Your data still needs protection from deletion, misconfiguration, and a compromised account. Native retention windows are short and were never designed for point-in-time recovery.

Read the shared responsibility model once and the split is obvious. Most teams read it for the first time during an incident. If Exchange, SharePoint, OneDrive, and Teams matter, back them up separately.

5. Immutability is the feature that saves you

Modern ransomware looks for backups first. Ask whether your backup copies are immutable or under object lock, whether your own admin credentials can delete them, and whether the backup console requires multi-factor authentication.

Attackers ask those same three questions when they get in, and they usually get answers faster than the people who own the account.

6. Retention beats capacity

Affordable cloud storage with seven days of history will not save a small business. Ransomware often sits quietly for weeks, and the file someone needs is frequently a version from last month. Thirty to ninety days is a sensible floor, longer if you are in a regulated industry.

Retention is a setting somebody picked once, probably at signup, probably to keep the bill down. It decides whether the version you need still exists.

7. A green checkmark is not a restore

The only proof that backup works is a restore you performed. Pick a folder monthly and a full device quarterly, time the recovery, and write down the result.

A backup you cannot trust the status of is just a guess with a green checkmark. If your provider cannot let you test on demand, your first real restore happens during an emergency, on the clock, in front of everyone.

Frequently asked questions

How much does cloud file backup for a small business cost? Plan on a predictable per-device or per-user monthly fee with retention included, and confirm there are no restore or egress charges. [Editor: insert a verified current price range. See https://cyberfortress.com/pricing/]

What should a small business back up first? Whatever you could not rebuild from memory: shared drives, accounting records, contracts, customer data, and email. Protect those, then expand.