{"id":32728,"date":"2026-10-07T18:13:16","date_gmt":"2026-10-07T16:13:16","guid":{"rendered":"https:\/\/eu.wedoback.com\/?page_id=32728"},"modified":"2026-10-07T18:37:06","modified_gmt":"2026-10-07T16:37:06","slug":"where-to-store-backups","status":"publish","type":"page","link":"https:\/\/eu.wedoback.com\/en\/guides\/backup\/where-to-store-backups\/","title":{"rendered":"Where should you store your backups?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"32728\" class=\"elementor elementor-32728 elementor-31919\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ff1542a e-con-full wdb-g e-flex e-con e-parent\" data-id=\"ff1542a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-96f118f e-con-full wdb-g-hero e-flex e-con e-parent\" data-id=\"96f118f\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-35a2c4e e-con-full wdb-g-hero-in e-flex e-con e-parent\" data-id=\"35a2c4e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ea68ec4 elementor-widget elementor-widget-text-editor\" data-id=\"ea68ec4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-crumb\"><a href=\"\/en\/\">Home<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/\">Guides<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/backup\/\">IT backup<\/a><\/p><p class=\"wdb-g-pill\" style=\"--pill:#01adb9\">IT backup<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-48c8bc3 elementor-widget elementor-widget-heading\" data-id=\"48c8bc3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Where should you store your backups?<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6b12757 elementor-widget elementor-widget-text-editor\" data-id=\"6b12757\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-lead\">The right location is the one that survives the disaster you fear. A fire in the server room wipes out the server and the disk plugged in next to it; ransomware wipes out everything the compromised account can modify, including a \u201cbackup\u201d NAS left on the same network. The location is therefore chosen scenario by scenario, not according to the price of the disk.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-42cd954 elementor-widget elementor-widget-text-editor\" data-id=\"42cd954\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-meta\"><span>Updated <b>October 2026<\/b><\/span><span><b>3 min<\/b> read<\/span><span><b>5<\/b> sources cited<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9df7078 e-con-full wdb-g-body e-flex e-con e-parent\" data-id=\"9df7078\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-0d14f21 e-con-full wdb-g-grid e-flex e-con e-parent\" data-id=\"0d14f21\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-c92c78b e-con-full wdb-g-article e-flex e-con e-parent\" data-id=\"c92c78b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3a6da25 elementor-widget elementor-widget-text-editor\" data-id=\"3a6da25\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-key\"><h2>Key points<\/h2><ul><li>Combine a <strong>local copy<\/strong> for fast restores with an <strong>offsite copy<\/strong> for disasters.<\/li><li>At least one copy must be <strong>offline or immutable<\/strong>: this is recommended by the CNIL (France&#8217;s data protection authority) and the ANSSI (France&#8217;s national cybersecurity agency).<\/li><li>Choose a distance suited to the risk: NIST requires a location that will not be hit by the same disaster as the main site.<\/li><li>Encrypt <strong>before sending<\/strong> and keep the key somewhere other than on the machine being backed up.<\/li><li>Require the storage country in writing; for an outsourced backup, the ANSSI expects data to be located within the European Union.<\/li><\/ul><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a366a58 elementor-widget elementor-widget-text-editor\" data-id=\"a366a58\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Four locations, and what they protect against<\/h2><table><thead><tr><th>Location<\/th><th>Protects against<\/th><th>Does not protect against<\/th><\/tr><\/thead><tbody><tr><td>Second disk or RAID in the same server<\/td><td>A failed disk<\/td><td>Fire, theft, deletion, ransomware<\/td><\/tr><tr><td>NAS in the same building<\/td><td>A server failure<\/td><td>Fire, flood, an attack that reaches the NAS<\/td><\/tr><tr><td>Disk or tape taken offsite<\/td><td>A disaster affecting the building<\/td><td>Missed rotation, loss, slowness, a stolen bag<\/td><\/tr><tr><td>Outsourced, encrypted copy, separate from internal accounts<\/td><td>Local disasters and many attacks from inside the network<\/td><td>Loss of the key, unreachable provider, copy too old<\/td><\/tr><\/tbody><\/table><p>The combination that works: a fast local copy to restore a file within the hour, and an offsite copy for the day the building or the network can no longer be trusted. At least one of the two must be immutable or offline. The CNIL lists keeping backups in the same place as the original data, or on the same systems without isolation, among the mistakes to avoid. Cybermalveillance.gouv.fr, the French government&#8217;s cybercrime assistance platform, advises disconnecting the backup medium from the network when it is not in use.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-16854be elementor-widget elementor-widget-text-editor\" data-id=\"16854be\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Geography matters as much as the building<\/h2><p>\u201cOffsite\u201d can still mean the same neighbourhood, the same electricity supplier, the same valley flood. For a regional disaster, copies are better kept in distant locations. NIST&#8217;s contingency planning guide (SP 800-34) makes distance, and the likelihood that the storage location will suffer the same disaster as the main site, the first selection criterion.<\/p><p>Where there is a data residency obligation (healthcare, public sector, contractual clause, law of the customer&#8217;s country), the location must be chosen, not imposed on you. For an outsourced backup, the ANSSI calls for checking that the data is located within the European Union. \u201cSomewhere in the cloud\u201d is no answer for an auditor who asks for the country.<\/p><p>Encryption before sending changes how much trust you need to place in the location: the provider stores data it cannot read if the key stays with the customer. The ANSSI recommends looking closely at key management (storage, backup, offline copy). That key must therefore be kept somewhere other than on the machine being backed up.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-98e549d elementor-widget elementor-widget-text-editor\" data-id=\"98e549d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What to require from the location<\/h2><p>NIST lists five criteria for an offsite storage location: geographic area, accessibility (time needed to retrieve the data, opening hours), security, environment (temperature, fire, power supply) and cost. Translated for an SME:<\/p><ul><li>Authenticated and logged access.<\/li><li>Redundancy: the backup copy itself does not rely on a single disk.<\/li><li>Monitoring: a write failure is reported.<\/li><li>A known restore time for the actual volume, not just the theoretical throughput of a link.<\/li><li>Hours during which someone can help you restore.<\/li><li>An exit route: getting your data back if you change provider, in a format you know how to read.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-03203eb elementor-widget elementor-widget-text-editor\" data-id=\"03203eb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-brand\"><h2>At WeDoBack<\/h2><p>Backups are stored on servers dedicated to this purpose, separate from the customer&#8217;s production, and made redundant across several European countries. If the law of the country or sector requires a specific zone, storage can be deployed there. Data is encrypted on the customer&#8217;s machine before it is sent; the key stays with the customer. The hosting centres and solutions used are certified ISO 27001 and HDS (the French certification for hosting health data). For a copy that no one can delete, the <a href=\"\/en\/immutable-offer\/\">IMMUTABLE<\/a> offer can be added to the backup. This is not collaborative file storage: the space is used for restoring, not for day-to-day work on documents.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/offers-and-prices\/\">See offers and prices<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/quotation\/\">Request a quote<\/a><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-344898a elementor-widget elementor-widget-text-editor\" data-id=\"344898a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-faq\"><h2>Frequently asked questions<\/h2><details><summary>Is a NAS in the same office a good backup location?<\/summary><p>It is a good first level, for quickly restoring a file or a server. It is not enough on its own: it shares the premises, the power supply and often the credentials of the production network. You need a second offsite copy, and one of the two must be offline or non-erasable.<\/p><\/details><details><summary>How far away should the offsite copy be stored?<\/summary><p>Far enough not to be affected by the same disaster. A few kilometres are enough for a fire on the premises; a valley flood or a regional power outage calls for a different area. NIST cites distance and the likelihood of a shared disaster as the first selection criterion.<\/p><\/details><details><summary>Can you take a backup disk home?<\/summary><p>Yes, it is a form of offsite and offline copy, provided the disk is encrypted, the rotation is actually carried out and someone else knows where it is. The risks are forgetting, losing or having the disk stolen, and a slower restore.<\/p><\/details><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d6ce70f elementor-widget elementor-widget-text-editor\" data-id=\"d6ce70f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Further reading<\/h2><div class=\"wdb-g-related\"><a href=\"\/en\/guides\/backup\/why-offsite-backup\/\"><small>IT backup<\/small>Why make an offsite backup?<\/a><a href=\"\/en\/guides\/backup\/should-you-outsource-backups\/\"><small>IT backup<\/small>Should you outsource your backups?<\/a><a href=\"\/en\/guides\/backup\/what-is-worm-storage\/\"><small>IT backup<\/small>What is WORM storage?<\/a><a href=\"\/en\/guides\/backup\/how-to-back-up-a-nas\/\"><small>IT backup<\/small>How do you back up a NAS?<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b9b7db2 elementor-widget elementor-widget-text-editor\" data-id=\"b9b7db2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-sources\"><h2>Sources<\/h2><p class=\"wdb-g-src-date\">Documents consulted in October 2026.<\/p><ol><li><a href=\"https:\/\/messervices.cyber.gouv.fr\/documents-guides\/anssi_fondamentaux_sauvegarde_systemes_dinformation_v1.1.pdf\" target=\"_blank\" rel=\"noopener\">Backing up information systems \u2013 The fundamentals (ANSSI-BP-100, v1.1, 27 November 2025)<\/a> \u2014 ANSSI<\/li><li><a href=\"https:\/\/nvlpubs.nist.gov\/nistpubs\/legacy\/sp\/nistspecialpublication800-34r1.pdf\" target=\"_blank\" rel=\"noopener\">SP 800-34 Rev. 1, Contingency Planning Guide for Federal Information Systems<\/a> \u2014 NIST<\/li><li><a href=\"https:\/\/www.cnil.fr\/fr\/securite-sauvegarder\" target=\"_blank\" rel=\"noopener\">Security: back up your data<\/a> \u2014 CNIL<\/li><li><a href=\"https:\/\/www.cybermalveillance.gouv.fr\/tous-nos-contenus\/bonnes-pratiques\/sauvegardes\" target=\"_blank\" rel=\"noopener\">Why and how to manage your backups properly<\/a> \u2014 Cybermalveillance.gouv.fr<\/li><li><a href=\"https:\/\/www.wedoback.com\/offres-et-tarifs\/\" target=\"_blank\" rel=\"noopener\">Offers and prices<\/a> \u2014 WeDoBack<\/li><\/ol><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-173560d e-con-full wdb-g-aside e-flex e-con e-parent\" data-id=\"173560d\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-a4b9201 elementor-widget elementor-widget-text-editor\" data-id=\"a4b9201\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<nav class=\"wdb-g-toc\" aria-label=\"Table of contents\"><p>On this page<\/p><ol><\/ol><\/nav>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bf0731e elementor-widget elementor-widget-text-editor\" data-id=\"bf0731e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-card\"><h3>Planning a backup, DRP or BCP project?<\/h3><p>More than 20 years of experience protecting business data.<\/p><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-tel\" href=\"tel:+33972507828\">+33 9 72 50 78 28<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-bab8996 e-con-full wdb-g-cta e-flex e-con e-parent\" data-id=\"bab8996\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-324edbe e-con-full wdb-g-cta-in e-flex e-con e-parent\" data-id=\"324edbe\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8b11ee0 elementor-widget elementor-widget-text-editor\" data-id=\"8b11ee0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Protect your data with WeDoBack<\/h2><p>Encrypted offsite backup, immutable storage, DRP and BCP: tell us about your servers and we will recommend the right combination.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/offers-and-prices\/\">See offers and prices<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":32686,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"Where to store backups: on-site or cloud? | WeDoBack","_seopress_titles_desc":"Store one copy outside the building and outside the administration network, ideally encrypted and impossible to erase with everyday accounts.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/sites\/6\/2026\/10\/wdb-og-sauvegarde.jpg","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/sites\/6\/2026\/10\/wdb-og-sauvegarde.jpg","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":"","_members_access_role":[],"_members_access_error":""},"class_list":["post-32728","page","type-page","status-publish","hentry"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"_links":{"self":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32728","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/comments?post=32728"}],"version-history":[{"count":1,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32728\/revisions"}],"predecessor-version":[{"id":33032,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32728\/revisions\/33032"}],"up":[{"embeddable":true,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32686"}],"wp:attachment":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/media?parent=32728"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}