{"id":31737,"date":"2026-10-07T11:53:31","date_gmt":"2026-10-07T09:53:31","guid":{"rendered":"https:\/\/mu.wedoback.com\/?page_id=31737"},"modified":"2026-10-07T12:22:46","modified_gmt":"2026-10-07T10:22:46","slug":"where-to-store-backups","status":"publish","type":"page","link":"https:\/\/mu.wedoback.com\/en\/guides\/backup\/where-to-store-backups\/","title":{"rendered":"Where should you store your backups?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"31737\" class=\"elementor elementor-31737 elementor-31550\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5a98d17 e-con-full wdb-g e-flex e-con e-parent\" data-id=\"5a98d17\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-d2d4192 e-con-full wdb-g-hero e-flex e-con e-parent\" data-id=\"d2d4192\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-b0e103b e-con-full wdb-g-hero-in e-flex e-con e-parent\" data-id=\"b0e103b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9bfa66e elementor-widget elementor-widget-text-editor\" data-id=\"9bfa66e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-crumb\"><a href=\"\/en\/\">Home<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/\">Guides<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/backup\/\">IT backup<\/a><\/p><p class=\"wdb-g-pill\" style=\"--pill:#01adb9\">IT backup<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c8467e5 elementor-widget elementor-widget-heading\" data-id=\"c8467e5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Where should you store your backups?<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9b636d7 elementor-widget elementor-widget-text-editor\" data-id=\"9b636d7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-lead\">The right location is the one that survives the disaster you fear. A fire in the server room wipes out the server and the disk plugged in next to it; ransomware wipes out everything the compromised account can modify, including a \u201cbackup\u201d NAS left on the same network. The location is therefore chosen scenario by scenario, not according to the price of the disk.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-73bf901 elementor-widget elementor-widget-text-editor\" data-id=\"73bf901\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-meta\"><span>Updated <b>October 2026<\/b><\/span><span><b>3 min<\/b> read<\/span><span><b>5<\/b> sources cited<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1da16b2 e-con-full wdb-g-body e-flex e-con e-parent\" data-id=\"1da16b2\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-f469c02 e-con-full wdb-g-grid e-flex e-con e-parent\" data-id=\"f469c02\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-ada8460 e-con-full wdb-g-article e-flex e-con e-parent\" data-id=\"ada8460\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-70d58ce elementor-widget elementor-widget-text-editor\" data-id=\"70d58ce\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-key\"><h2>Key points<\/h2><ul><li>Combine a <strong>local copy<\/strong> for fast restores with an <strong>off-site copy<\/strong> for disasters.<\/li><li>At least one copy must be <strong>offline or immutable<\/strong>: the ANSSI, France\u2019s national cybersecurity agency, recommends it.<\/li><li>Choose a distance suited to the risk: NIST calls for a location that would not be hit by the same disaster as the main site.<\/li><li>Encrypt <strong>before sending<\/strong> and keep the key somewhere other than on the backed-up machine.<\/li><li>Require the storage country in writing: outside Mauritius, it is a transfer governed by section 36 of the Data Protection Act 2017.<\/li><\/ul><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-247c4b8 elementor-widget elementor-widget-text-editor\" data-id=\"247c4b8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Four locations, and what they protect against<\/h2><table><thead><tr><th>Location<\/th><th>Protects against<\/th><th>Does not protect against<\/th><\/tr><\/thead><tbody><tr><td>Second disk or RAID in the same server<\/td><td>A failed disk<\/td><td>Fire, theft, deletion, ransomware<\/td><\/tr><tr><td>NAS in the same building<\/td><td>A server failure<\/td><td>Fire, flood, an attack that reaches the NAS<\/td><\/tr><tr><td>Disk or tape taken off site<\/td><td>A disaster affecting the building<\/td><td>Forgotten rotation, loss, slowness, theft of the bag<\/td><\/tr><tr><td>Outsourced, encrypted copy, separate from internal accounts<\/td><td>Local disasters and many attacks from inside the network<\/td><td>Loss of the key, unreachable provider, copy too old<\/td><\/tr><\/tbody><\/table><p>The combination that holds up: a fast local copy to restore a file within the hour, and an off-site copy for the day the building or the network can no longer be trusted. At least one of the two must be immutable or offline. CERT-MU recommends keeping an off-site copy, separate from the original data. Also disconnect the backup medium from the network when it is not in use.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-26a6947 elementor-widget elementor-widget-text-editor\" data-id=\"26a6947\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Geography matters as much as the building<\/h2><p>\u201cOff-site\u201d can still mean the same neighbourhood, the same electricity supplier, the same valley flood. For a regional disaster, copies are better kept in distant locations. The NIST contingency planning guide (SP 800-34) makes distance, and the likelihood that the storage location will suffer the same disaster as the main site, the first selection criterion.<\/p><p>Where there is a data residency obligation (health, public sector, contractual clause, law of the client\u2019s country), the location must be chosen, not simply accepted. In Mauritius, storage outside the country is a transfer governed by section 36 of the Data Protection Act 2017 (appropriate safeguards): check where the data is. \u201cSomewhere in the cloud\u201d is no answer for an auditor who asks for the country.<\/p><p>Encryption before sending changes how much trust you need to place in the location: the provider stores data it cannot read if the key stays with the client. The ANSSI, France\u2019s national cybersecurity agency, recommends examining key management (storage, backup, offline copy). This key must therefore be kept somewhere other than on the backed-up machine alone.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5018000 elementor-widget elementor-widget-text-editor\" data-id=\"5018000\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What to require from the location<\/h2><p>NIST sets out five criteria for an off-site storage location: geographic area, accessibility (time needed to retrieve the data, opening hours), security, environment (temperature, fire, power supply) and cost. Translated for an SME:<\/p><ul><li>Authenticated, logged access.<\/li><li>Redundancy: the backup copy itself does not rely on a single disk.<\/li><li>Monitoring: a write failure is reported.<\/li><li>A known restore time for the actual volume, not just the theoretical throughput of a link.<\/li><li>Hours during which someone can help you restore.<\/li><li>An exit path: recovering the data if you change provider, in a format you know how to read.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2eb0117 elementor-widget elementor-widget-text-editor\" data-id=\"2eb0117\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-brand\"><h2>At WeDoBack<\/h2><p>Backups are stored on servers dedicated to this purpose, separate from the client\u2019s production, and replicated across several distinct sites, or within the area required by the client\u2019s legislation. The storage location is agreed with the client; outside Mauritius, it is a transfer governed by section 36 of the Data Protection Act 2017. Data is encrypted on the client\u2019s machine before it is sent; the key stays with the client. The data centres and solutions used are ISO 27001 and HDS (French health data hosting) certified. For a copy that no one can delete, the <a href=\"\/en\/immutable-offer\/\">IMMUTABLE<\/a> offer can be added to the backup. It is not collaborative file storage: the space is used for restoring, not for working on documents day to day.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/offers-and-prices\/\">See offers and prices<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/quotation\/\">Request a quote<\/a><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-cabd758 elementor-widget elementor-widget-text-editor\" data-id=\"cabd758\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-faq\"><h2>Frequently asked questions<\/h2><details><summary>Is a NAS in the same office a good backup location?<\/summary><p>It is a good first level, for quickly restoring a file or a server. On its own it is not enough: it shares the room, the power supply and often the credentials of the production network. You need a second, off-site copy, and one of the two must be offline or non-erasable.<\/p><\/details><details><summary>How far away should the off-site copy be stored?<\/summary><p>Far enough not to suffer the same disaster. A few kilometres are enough for a fire on the premises; a valley flood or a regional power outage calls for a different area. NIST cites distance and the likelihood of a shared disaster as the first selection criterion.<\/p><\/details><details><summary>Can you take a backup disk home?<\/summary><p>Yes, it is a form of off-site and offline copy, provided the disk is encrypted, the rotation is actually carried out and someone else knows where it is. The risks are forgetting it, losing it or having it stolen, and a slower restore.<\/p><\/details><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f4d50ae elementor-widget elementor-widget-text-editor\" data-id=\"f4d50ae\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Further reading<\/h2><div class=\"wdb-g-related\"><a href=\"\/en\/guides\/backup\/why-offsite-backup\/\"><small>IT backup<\/small>Why make an off-site backup?<\/a><a href=\"\/en\/guides\/backup\/should-you-outsource-backups\/\"><small>IT backup<\/small>Should you outsource your backups?<\/a><a href=\"\/en\/guides\/backup\/what-is-worm-storage\/\"><small>IT backup<\/small>What is WORM storage?<\/a><a href=\"\/en\/guides\/backup\/how-to-back-up-a-nas\/\"><small>IT backup<\/small>How do you back up a NAS?<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3481a0e elementor-widget elementor-widget-text-editor\" data-id=\"3481a0e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-sources\"><h2>Sources<\/h2><p class=\"wdb-g-src-date\">Documents consulted in October 2026.<\/p><ol><li><a href=\"https:\/\/messervices.cyber.gouv.fr\/documents-guides\/anssi_fondamentaux_sauvegarde_systemes_dinformation_v1.1.pdf\" target=\"_blank\" rel=\"noopener\">Backing up information systems \u2013 The fundamentals (ANSSI-BP-100, v1.1, 27 November 2025)<\/a> \u2014 ANSSI (France\u2019s national cybersecurity agency)<\/li><li><a href=\"https:\/\/nvlpubs.nist.gov\/nistpubs\/legacy\/sp\/nistspecialpublication800-34r1.pdf\" target=\"_blank\" rel=\"noopener\">SP 800-34 Rev. 1, Contingency Planning Guide for Federal Information Systems<\/a> \u2014 NIST<\/li><li><a href=\"https:\/\/dataprotection.govmu.org\/Documents\/DPA_2017.pdf\" target=\"_blank\" rel=\"noopener\">Data Protection Act 2017<\/a> \u2014 Data Protection Office (Mauritius)<\/li><li><a href=\"https:\/\/cert-mu.govmu.org\/cert-mu\/wp-content\/uploads\/2023\/10\/Guideline-on-devising-a-personal-backup-plan.pdf\" target=\"_blank\" rel=\"noopener\">Guideline on devising a personal backup plan (CMSGu2017-03)<\/a> \u2014 CERT-MU<\/li><li><a href=\"https:\/\/www.wedoback.com\/offres-et-tarifs\/\" target=\"_blank\" rel=\"noopener\">Offers and prices<\/a> \u2014 WeDoBack<\/li><\/ol><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-5263744 e-con-full wdb-g-aside e-flex e-con e-parent\" data-id=\"5263744\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8562352 elementor-widget elementor-widget-text-editor\" data-id=\"8562352\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<nav class=\"wdb-g-toc\" aria-label=\"Table of contents\"><p>On this page<\/p><ol><\/ol><\/nav>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5f7109e elementor-widget elementor-widget-text-editor\" data-id=\"5f7109e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-card\"><h3>Planning a backup, DRP or BCP project?<\/h3><p>More than 20 years of experience protecting business data.<\/p><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-tel\" href=\"tel:+33972507828\">+33 9 72 50 78 28<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-85861b9 e-con-full wdb-g-cta e-flex e-con e-parent\" data-id=\"85861b9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-72cb1cd e-con-full wdb-g-cta-in e-flex e-con e-parent\" data-id=\"72cb1cd\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0034056 elementor-widget elementor-widget-text-editor\" data-id=\"0034056\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Protect your data with WeDoBack<\/h2><p>Encrypted offsite backup, immutable storage, DRP and BCP: tell us about your servers and we will recommend the right combination.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/offers-and-prices\/\">See offers and prices<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":31721,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"Where to store backups: on-site or cloud? | WeDoBack","_seopress_titles_desc":"Store a copy outside the building and outside the administration network, preferably encrypted and not erasable by everyday accounts.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/sites\/4\/2026\/10\/wdb-og-sauvegarde.jpg","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/sites\/4\/2026\/10\/wdb-og-sauvegarde.jpg","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":"","_members_access_role":[],"_members_access_error":""},"class_list":["post-31737","page","type-page","status-publish","hentry"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"_links":{"self":[{"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/31737","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/comments?post=31737"}],"version-history":[{"count":1,"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/31737\/revisions"}],"predecessor-version":[{"id":31822,"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/31737\/revisions\/31822"}],"up":[{"embeddable":true,"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/31721"}],"wp:attachment":[{"href":"https:\/\/mu.wedoback.com\/en\/wp-json\/wp\/v2\/media?parent=31737"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}