Data backup
Data backup that comes back when you need it
A 3-2-1-1-0 strategy with cloud, an immutable copy and Alliances’ exclusive vaulted tape custody. We test restores to make sure your data comes back after ransomware, hardware failure, human error or disaster.
3-2-1-1-0Immutable copyVaulted tapeMicrosoft 365Disaster recovery
Ransomware blocked
Restore tested
Tape in the vault
3copies of dataThe original plus two independent copies
2media typesCloud and magnetic tape
1offsite copyCustody in the Alliances vault
0restore errorsBackups verified by testing
Standards and concepts we follow
3-2-1-1-0 ruleRPORTOImmutability (WORM)Air gapLTOAES-256S3 Object LockDRaaSLGPDISO/IEC 27001ISO 22301NIST CSF 2.0CIS Controls v8.1
What it is
What data backup is and why copying alone is not enough
Data backup is the periodic copy of files, systems, databases and email to another location, from which they can be restored if the original is lost, corrupted or held for ransom. Ransomware now also tries to delete or encrypt backups, so a reliable backup needs an immutable or isolated (air-gapped) copy and restore testing.
Protect
Copies on different media and locations, encrypted, with one of them immutable or off the network.
Recover
Restore a single file, a whole server or the entire environment within the agreed time (RTO).
Prove
Periodic restore tests and reports that show the backup really works.
Solutions
What we protect: 12 backup and recovery areas
We build the plan around how valuable each piece of data is to the business: how much can be lost (RPO), how fast it must come back (RTO) and how long it must be kept (retention).
01
Physical and virtual servers
VMware, Hyper-V and Proxmox, with full image backup and single-file recovery.
Image + file02
Desktops and laptops
Backup of user devices, including people who work outside the office.
Endpoints03
Microsoft 365
Exchange email, OneDrive, SharePoint and Teams. Microsoft keeps the service running, but protecting the data is the company’s responsibility.
SaaS04
Google Workspace
Gmail, Drive and Calendar with their own retention, independent of Google’s trash and versions.
SaaS05
Databases
SQL Server, MySQL, PostgreSQL and Firebird with consistent copies, without stopping the system.
Consistency06
Files and NAS
Network shares, file servers and storage, with version history.
Versioning07
Cloud backup
Encrypted offsite copy on S3-compatible storage with deletion lock.
Offsite08
Immutable copy
WORM storage: nobody can change or delete the copy during the defined period, not even an attacker with admin credentials.
Immutability09
LTO tape with vault custody
Offline copy on magnetic tape, taken off site and kept in the Alliances vault, out of reach of any network attack.
Physical air gap10
Disaster recovery (DR)
A plan and environment to bring servers and systems back up elsewhere when the main site is unavailable.
DRaaS11
Restore testing
We restore samples periodically to prove the backup works and record the result.
0 errors12
Monitoring and reporting
Daily job tracking, failure alerts and a monthly report for management and audits.
EvidenceThe golden rule
The 3-2-1-1-0 rule: the market standard for not losing data
The 3-2-1 rule is the international reference for data protection. The modern version, 3-2-1-1-0, adds an immutable or isolated copy and error-free verification, because ransomware now targets backups.
3
Three copies
The original data plus two independent backup copies.
2
Two media
Different storage types, such as disk, cloud and tape, so you do not depend on one.
1
One offsite
At least one copy in another location: cloud or the Alliances vault.
1
One immutable or offline
A copy that cannot be changed or reached over the network: immutable storage or tape.
0
Zero errors
Restore tests confirm every backup can be recovered.
Hardware failure, ransomware, natural disaster or human error: with the 3-2-1-1-0 rule there is always a clean copy to go back to.
Comparison
Local backup, cloud only or the Alliances 3-2-1-1-0 strategy?
| Local backup only | Alliances 3-2-1-1-0 strategy | Cloud only | |
|---|---|---|---|
| Ransomware | Often encrypted along with the network | Immutable copy and offline tape stay out of reach | Protected if immutability is configured |
| Office disaster | Lost along with the equipment | Cloud copy and vaulted tape in another location | Protected |
| Restore speed | Fast | Fast from the local copy, complete from cloud or tape | Depends on the internet link |
| Long-term retention | Limited by disk space | Tape for years of retention at low cost | Cost grows with volume |
| Proof | Rarely tested | Restore tests and monthly report | Depends on the provider |
Is your data really protected?
We assess your current backup and show you the risks, with no commitment.
How we work
How we implement your backup
Inventory
We map servers, computers, databases, cloud, Microsoft 365 or Google Workspace and where critical data lives.
RPO, RTO and retention
We agree with you how much can be lost, how fast it must come back and how long to keep it.
3-2-1-1-0 architecture
We choose the platform, targets (local, cloud, immutable, tape) and encryption.
First backup
We run the initial full copy and set up schedules and alerts.
Restore test
We restore samples and document the recovery procedure (runbook).
Ongoing operation
We monitor jobs, handle failures, rotate tapes and send reports.
You get in writing what is protected, how often, for how long and how fast it comes back.
What you get
Protection with evidence for leadership, IT and auditors or insurers.
- Backup plan with RPO, RTO and retention per system
- Encrypted local, cloud and immutable copies
- LTO tapes with vault custody and chain-of-custody records
- Daily monitoring and failure alerts
- Documented periodic restore tests
- Disaster recovery runbook
- Monthly report for management and audits
Signs your backup is at risk
If any of these is true, it is worth reviewing now:
- The backup sits on the same server, network or building as the data
- Nobody has tested a restore in months
- Microsoft 365 or Google Workspace has no backup of its own
- There is no immutable or offline copy
- Nobody knows how long it would take to get the business running again
- Backup failure alerts are not followed up
The Alliances difference
Tape backup with vault custody: offline protection no ransomware can reach
Beyond the cloud, Alliances keeps an LTO magnetic tape copy outside your company. Disconnected from the network, it stays intact even if the whole environment is compromised.
Your data
→Backup
→LTO tape
→Secure pickup
→Alliances vault
→Restore
Immunity
Offline backup
Off the network, tape is inaccessible to viruses, ransomware and intruders, even if the environment is fully compromised.
Controlled environment
Climate-controlled vault
Controlled temperature and humidity to preserve tape integrity for many years, with restricted access.
Secure logistics
Tracked custody
Scheduled pickup, secure transport and a record of the tapes’ full lifecycle, with a chain-of-custody statement for audits.
Tape is also the most cost-effective way to keep long-term retention for legal, tax or contractual requirements.
Glossary
10 backup concepts explained simply
Terms that come up in any data protection conversation, and what they mean for your business.
RPO
How much data the company can afford to lose, measured in time. An RPO of 4 hours means a backup at least every 4 hours.
RTO
How fast a system must be running again after an incident.
Retention
How long each copy is kept: days, months or years, depending on the business and the law.
Immutability
A copy that cannot be changed or deleted for a period, not even by someone with admin credentials.
Air gap
A copy isolated from the network, physically (tape in a vault) or logically, out of an attacker’s reach.
Instant recovery
Running a virtual machine directly from backup while the full restore completes.
DRaaS
Disaster recovery as a service: an environment ready to take over if the main one stops.
Deduplication
Storing only what differs between copies, saving space and bandwidth.
Encryption
Data is encrypted in transit and at rest; without the key the copy is unreadable.
Runbook
A tested, step-by-step recovery guide so nobody improvises during a crisis.
Backup is one of the layers of ransomware defense. See also Cybersecurity and IT Infrastructure.
Want a tailored backup plan?
We size RPO, RTO, retention and costs for your environment.
Platforms
Backup platforms and targets we work with
We work with the leading backup platforms on the market and choose the best fit for your environment, data volume and budget.
Backup and recovery software
Cloud and local storage (targets)
Protected cloud applications
Brands mentioned belong to their respective owners and are shown as references of supported platforms.
FAQ
Questions about data backup
What is the 3-2-1 backup rule?
Keep three copies of your data, on two different media types, with one copy off site. The current version, 3-2-1-1-0, adds an immutable or offline copy and error-free verification through restore testing.
Does cloud backup protect against ransomware?
Only if the copy is immutable or isolated. If an attacker gets into the backup account, they can delete the copies. That is why we combine cloud with deletion lock (Object Lock) and offline vaulted tape.
Do I need to back up Microsoft 365 or Google Workspace?
Yes. Providers guarantee service availability, but protecting and retaining the data is the customer’s responsibility (shared responsibility model). Deletions, attacks and closed accounts can lead to lost email and files.
Why use tape if there is cloud?
Tape is disconnected from any network, so no remote attack can reach it, and it is low-cost for keeping large volumes for many years. It complements cloud and disk in the 3-2-1-1-0 rule.
How often is the backup taken?
It depends on each system’s RPO. Databases and critical systems can be copied several times a day; less critical files, once a day. We define this with you in the plan.
How do I know the backup works?
We run periodic restore tests, document the results and send a monthly report with the status of every job. A backup is only proven once it has been restored successfully.
Does backup help with privacy compliance?
Yes. Privacy laws such as Brazil’s LGPD and the GDPR require measures to protect personal data against loss and destruction. Encrypted backup, defined retention and documented tests are evidence of those measures.
Page updated in November 2026.
Contact us
Request your data protection plan
Fill out the form or message us on WhatsApp. A specialist will get back to you to understand your environment and propose a backup plan.
- Assessment of your current backup and risks
- Plan with RPO, RTO, retention and costs
- Implementation, testing and ongoing operation
atendimento@alliances.com.br+55 11 98603-7462