Patient records copied, locked and tested
Practice data and imaging copied nightly, with a locked copy off site.
When the practice-management server stops, the front desk works from paper. We keep that server, the imaging archive and staff mail copied, locked off site, and drilled every quarter.
Where clinic data is fragile
When the server stops
Scheduling, charting and billing often share one on-site server. If it fails at 8 a.m., patients are already waiting.
Imaging archives keep growing
X-rays and scans pile up every year. After the first full copy, only new and changed data is sent.
Backups attackers look for
CISA warns that many ransomware variants try to delete or encrypt accessible backups. Our second copy stays locked.
Paperwork before access
Your compliance officer decides what agreements a vendor needs. We sign a business associate agreement on request.
What a clinic usually runs
Server Backup
Nightly images of the practice-management and imaging servers, with hourly file versions in between.
Standby Recovery
A failed server boots as a cloud machine, with a 4-hour target, while hardware is replaced.
Immutable Offsite Copy
A copy in a second US region that stays locked for 30 days by default.
Microsoft 365 and Google Workspace backup
Staff mail and shared files in Microsoft 365 or Google Workspace, copied 3 times a day.
The first quarter, in three steps
- Week 1
Map clinical systems
We list the practice server, imaging, front-desk PCs and mail, then rank them by how long the clinic can wait.
- Day 10
Copies locked and proven
Nightly images and the locked offsite copy are running. We restore one day’s images to a test machine and time it.
- Week 12
Full drill, written up
We boot the practice server in isolation, restore a mailbox and a file sample, and send results within 3 business days.
Clinic questions, answered plainly
Will you sign a business associate agreement?
Yes, we sign a business associate agreement on request, before any patient data is copied. Whether you need one, and what it must contain, is for your compliance officer or counsel to decide. We also complete your security questionnaire and describe in writing where copies live and who can reach them.
Are you HIPAA compliant?
We do not claim HIPAA compliance or any certification. We describe our controls in writing instead: AES-256 encryption at rest, TLS in transit, two-factor sign-in for every engineer, logged access and background checks. Your compliance officer decides whether those controls meet your obligations, and we sign a business associate agreement on request.
Can you back up our imaging system?
In most cases, yes, because imaging software keeps its archive and database on a Windows server or a NAS. We image that server nightly and keep hourly file versions through the day. During the free backup check we confirm where your images actually live and test one restore before you commit to anything.
How soon can we see patients after a server failure?
On the Standby Recovery plan, our target is to have the failed server running as a cloud virtual machine within 4 hours, with front-desk PCs connecting over a secure tunnel. Without it, a typical server restores to new hardware overnight. These are targets we time in each drill, not guarantees.
Can we stop Ezbre from reading our data?
Yes. On Server Backup and Immutable Offsite Copy you can hold the encryption key yourself, so nobody at Ezbre can read the copies. The trade-off is real: if the key is lost, we cannot restore. We help you store it in two safe places and check it during each quarterly drill.
See what you could restore
A free 45-minute backup check, one test restore, and a plain written page of findings.