Backup basics
What is the 3-2-1 rule?
Keep three copies of your data, on two different kinds of storage, with one copy off site. We add one condition: the off-site copy is immutable, so it cannot be changed or deleted for 30 days by default. Your live data, our primary copy and the locked copy in a second US region make the three.
How often do you back up?
It depends on the system. Workstations copy file changes every hour they are online. Servers get a nightly image plus hourly file versions. Microsoft 365 and Google Workspace are copied 3 times a day. If a system cannot afford to lose that much work, we agree a tighter schedule when we draw up your recovery map.
How long do you keep old versions?
By default, servers keep 30 daily, 12 monthly and 7 yearly versions, workstations keep 90 days, and cloud apps keep 1 year, extendable to 7. Every default can be changed. Your compliance officer or counsel decides how long records must be kept, and we set retention to match.
What does a backup not cover?
Anything that is not on the recovery map. A laptop that never connects, a USB drive in a drawer, a personal email account or a database nobody mentioned stays outside the backup. That is why onboarding starts with the map, and why the monthly report names every device that has stopped checking in.
Do laptops back up away from the office?
Yes. Workstation Backup runs over any internet connection, at home, on the road or on a job site, and copies changes every hour the laptop is online. If a laptop stops checking in, monitoring flags it and an engineer follows up with you the same business day.
Do we need an IT person to use Ezbre?
No. We install the agents, connect your cloud apps, watch every job and run every restore; you need someone who can approve admin access once. If you already have an IT person or an outside provider, we work alongside them: they keep the rest of your IT, and we run backup and recovery.
Security and privacy
How is our data encrypted?
With AES-256 while it is stored and TLS while it moves. Both copies, in the primary region and the immutable second region, are encrypted at rest. On Server Backup and Immutable Offsite Copy you can hold your own key, so nobody at Ezbre can read the data, and nobody can restore it if the key is lost.
Who at Ezbre can see our files?
Only the engineers working on your account, and only when the work needs it. Every engineer works in the US, passes a background check and signs a written confidentiality agreement. Access to client data needs two-factor sign-in and is logged, and we can share the access log for your account on request.
What does immutable mean?
It means locked. Once our second-region copy is written, nobody can change or delete it until the lock ends: not you, not our engineers, and not an attacker holding stolen passwords. The lock lasts 30 days by default, and up to 1 year on the Immutable Offsite Copy plan.
Can ransomware reach our backups?
It can reach any backup it can see, which is why we keep one it cannot change. CISA’s #StopRansomware Guide warns that “many ransomware variants attempt to find and subsequently delete or encrypt accessible backups.” Our immutable copy sits in a second US region and stays locked for 30 days, even if your passwords are stolen.
Do you hold security certifications?
No, and we do not claim any. We answer the security questionnaire your insurer, auditor or client sends, in writing, and we sign a business associate agreement on request for clinics. Your compliance officer decides whether our controls meet your requirements; ask your counsel about anything legal.
Do you use our data for anything else?
No. We process your data only to back it up, test it and restore it for you. We do not sell it or use it for marketing. Our privacy policy explains what we hold as your processor, and your signed order governs the details.
Restores
How do we ask for a restore?
Email support@ezbre.com with what you need, where it lived, and roughly when it was last right. A recovery engineer replies, confirms the version with you, and restores it to the original place or a new one. Our target for a single file or mailbox item is 1 business hour from your email.
Can you restore outside business hours?
Yes, for clients on Server Backup or Standby Recovery. Email support@ezbre.com with URGENT in the subject at any hour, and we answer within 2 hours, every day of the year. Requests on other plans are handled Monday to Friday, 9 a.m. to 5 p.m. Mountain.
What if we do not know when the file was last right?
That is common, and it is fine. Tell us what you remember: who last edited it, what it should contain, roughly which week. We look through the versions with you, restore two or three candidates side by side, and you choose. Nothing overwrites live work until you confirm.
Why test restores if the backup job succeeded?
Because a successful job proves data was copied, not that it comes back working. CISA’s #StopRansomware Guide says to “regularly test the availability and integrity of backups in a disaster recovery scenario.” A Restore Drill does that: it restores files, a mailbox and a whole system to an isolated environment, and times each one.
Will a restore overwrite our current files?
Not unless you ask it to. By default we restore to a separate folder or a new location, so the live copy and the restored copy sit side by side. Once you confirm the restored version is the one you want, we move it into place and tell you what changed.
What happens if a restore fails?
You hear about it in the next hourly update, with what we are trying next: usually an earlier version or the copy in our second region. Afterwards you get a written note of the cause and the fix. In a Restore Drill, anything that fails is fixed and tested again in the same quarter.
Billing and contracts
Is there a long-term contract?
No. Every monthly plan runs month to month and ends with 30 days’ notice by email. The two one-off projects, Sync Migration and the Recovery Runbook, are fixed-fee and quoted in writing before work starts. A signed order sets out what you bought, and our terms summarize the rest.
Is there a setup fee?
Not on monthly plans for 5 or more devices or users, which covers the 5 to 200 person businesses we work with. Onboarding, the recovery map and the first proven restore are part of the monthly price. Fixed-fee projects are priced on their own and quoted in writing first.
When are we invoiced?
Monthly plans appear on one itemized invoice each month, with each plan, count and price on its own line. A Restore Drill that is not included is invoiced each quarter. Fixed-fee projects are invoiced as the written quote sets out. Every price is before sales tax.
Can we take our data with us?
Yes, at no charge. After your 30 days’ notice we export all of your data in standard formats and confirm the export with you. We delete our copies 30 days after you confirm it, and send written confirmation that they are gone.
Can we buy one plan without the others?
Yes. Every plan is sold on its own except Standby Recovery, which needs Server Backup because it boots your server from those images. You can start with a single plan, such as Microsoft 365 Backup, and add others later at the same published prices.
What is not included in the price?
Sales tax, on-site visits, server storage above the 1 TB included per server, and recovery from failed disks, which we do not do. Restores on request, monitoring, the monthly report, the first proven restore and the exit export are part of every backup plan.
Ask the question we missed
Email mail@ezbre.com and we reply within one business day. Or book a free check and ask an engineer directly.
