{"id":32737,"date":"2026-10-07T18:13:04","date_gmt":"2026-10-07T16:13:04","guid":{"rendered":"https:\/\/eu.wedoback.com\/?page_id=32737"},"modified":"2026-10-07T18:37:35","modified_gmt":"2026-10-07T16:37:35","slug":"why-offsite-backup","status":"publish","type":"page","link":"https:\/\/eu.wedoback.com\/en\/guides\/backup\/why-offsite-backup\/","title":{"rendered":"Why make an offsite backup?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"32737\" class=\"elementor elementor-32737 elementor-31921\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9e8151a e-con-full wdb-g e-flex e-con e-parent\" data-id=\"9e8151a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-aea5791 e-con-full wdb-g-hero e-flex e-con e-parent\" data-id=\"aea5791\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-fcaa4f1 e-con-full wdb-g-hero-in e-flex e-con e-parent\" data-id=\"fcaa4f1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ee2cc42 elementor-widget elementor-widget-text-editor\" data-id=\"ee2cc42\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-crumb\"><a href=\"\/en\/\">Home<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/\">Guides<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/backup\/\">IT backup<\/a><\/p><p class=\"wdb-g-pill\" style=\"--pill:#01adb9\">IT backup<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a463f7a elementor-widget elementor-widget-heading\" data-id=\"a463f7a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Why make an offsite backup?<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fbc5be4 elementor-widget elementor-widget-text-editor\" data-id=\"fbc5be4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-lead\">An offsite backup exists so that an event that destroys the production site, physically or logically, still leaves a copy elsewhere. Without it, your backup protects you from a disk failure, but neither from the loss of the building nor from an attacker already inside the network.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dd812a1 elementor-widget elementor-widget-text-editor\" data-id=\"dd812a1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-meta\"><span>Updated <b>October 2026<\/b><\/span><span><b>3 min<\/b> read<\/span><span><b>5<\/b> sources cited<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-2de386a e-con-full wdb-g-body e-flex e-con e-parent\" data-id=\"2de386a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-c3dc8a8 e-con-full wdb-g-grid e-flex e-con e-parent\" data-id=\"c3dc8a8\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-3d94de7 e-con-full wdb-g-article e-flex e-con e-parent\" data-id=\"3d94de7\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bdbcec7 elementor-widget elementor-widget-text-editor\" data-id=\"bdbcec7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-key\"><h2>Key points<\/h2><ul><li>An offsite copy covers <strong>fire<\/strong>, <strong>flooding<\/strong>, <strong>theft<\/strong> and some <strong>attacks<\/strong> on the local network.<\/li><li>It only protects against ransomware if compromised accounts <strong>cannot delete it<\/strong>: offline or immutable.<\/li><li>Choose a distance that avoids the <strong>same disaster<\/strong> as the main site.<\/li><li>It replaces neither monitoring, nor a sufficient history, nor a DRP to restart the service.<\/li><\/ul><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-53338c0 elementor-widget elementor-widget-text-editor\" data-id=\"53338c0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>The scenarios an offsite copy covers<\/h2><p><strong>Physical disaster.<\/strong> Fire, flooding, structural collapse, theft with removal of equipment. Everything in the same premises is lost at once, including the \u201cemergency\u201d external disks in the drawer. The CNIL, France&#8217;s data protection authority, lists storing backups in the same place as the original data among the mistakes to avoid, and recommends at least one copy in a geographically separate location.<\/p><p><strong>Narrow regional disaster.<\/strong> A copy held by the office next door or on the same electricity substation can go down with you. The useful distance depends on the risk: a few kilometres are enough for a fire in your premises, but not for area-wide flooding. The NIST contingency planning guide asks you to take into account the likelihood that the storage site is hit by the same disaster as the main site.<\/p><p><strong>An attack on the network.<\/strong> Modern ransomware looks for backups. It uses privileged accounts, mounted shares and consoles left open. In 2025 Mandiant observed that ransomware groups now target backup infrastructure and delete backups stored in the cloud to make restoring impossible. An offsite copy only protects you if these accounts cannot delete it. Otherwise, \u201coffsite\u201d simply means \u201ca different IP address, the same credentials\u201d.<\/p><p><strong>A local operating error.<\/strong> A format, a replaced storage array, a clean-up script with too broad a scope. The remote copy, especially if it is immutable for a set period, gives you time to notice.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2b548cb elementor-widget elementor-widget-text-editor\" data-id=\"2b548cb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>The scenarios an offsite copy does not cover on its own<\/h2><ul><li>A backup that has been failing for three weeks without anyone reading the reports.<\/li><li>A lost decryption key.<\/li><li>A history that is too short: last night&#8217;s offsite copy is already encrypted, and there is no version from a month ago. See <a href=\"\/en\/guides\/backup\/how-long-to-keep-backups\/\">How long should you keep your backups?<\/a>.<\/li><li>The need to keep working within the hour. The offsite copy lets you restore. It does not start a replacement server. Resuming the service is the job of the <a href=\"\/en\/guides\/drp-bcp\/what-is-a-drp\/\">DRP<\/a> or the BCP.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-71b7b18 elementor-widget elementor-widget-text-editor\" data-id=\"71b7b18\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Offsite and offline<\/h2><p>Two different properties:<\/p><ul><li><strong>Offsite<\/strong>: another location.<\/li><li><strong>Offline or immutable<\/strong>: the copy cannot be continuously modified from the production network. The ANSSI, France&#8217;s national cybersecurity agency, defines an offline backup as a backup on a medium disconnected from any information system.<\/li><\/ul><table><thead><tr><th><\/th><th>On site, online<\/th><th>Offsite, online<\/th><th>Offsite, immutable<\/th><th>Offline<\/th><\/tr><\/thead><tbody><tr><td>Fire in the premises<\/td><td>Lost<\/td><td>Protected<\/td><td>Protected<\/td><td>Protected if stored elsewhere<\/td><\/tr><tr><td>Stolen administrator account<\/td><td>Exposed<\/td><td>Exposed if same credentials<\/td><td>Protected until expiry<\/td><td>Protected<\/td><\/tr><tr><td>Restore speed<\/td><td>Very high<\/td><td>High<\/td><td>High<\/td><td>Slower<\/td><\/tr><\/tbody><\/table><p>A cloud copy reachable with the domain administrator&#8217;s password is offsite and online. Against fire, it is already a major improvement. Against ransomware, it must also refuse deletion for a set period, or require an identity the attacker does not have. The ANSSI recommends an offline copy, or at least an online offsite copy under certain conditions; for an online copy, it considers a WORM solution an option, while the offline copy remains the most robust.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5c64123 elementor-widget elementor-widget-text-editor\" data-id=\"5c64123\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-brand\"><h2>At WeDoBack<\/h2><p>Copies are kept outside the production network, on servers dedicated to backup, replicated across several European countries. The client can require a region imposed by law. The <a href=\"\/en\/immutable-offer\/\">IMMUTABLE<\/a> offer prevents modification and deletion for the chosen period, up to ten years, which addresses the case where backup credentials are stolen. Encryption takes place on the machine before the data leaves, with a key held by the client. To restart servers on standby instances from a copy, see the <a href=\"\/en\/drp-offer\/\">DRP<\/a> offer.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/immutable-offer\/\">Discover the IMMUTABLE offer<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/quotation\/\">Request a quote<\/a><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bb5941c elementor-widget elementor-widget-text-editor\" data-id=\"bb5941c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-faq\"><h2>Frequently asked questions<\/h2><details><summary>Does my software vendor&#8217;s cloud count as an offsite backup?<\/summary><p>Only if it keeps a history, under credentials separate from yours, and you can restore an earlier version from it. A synchronisation or file-sharing space, even hosted elsewhere, replicates deletions and encryption: it is offsite, but it is not a backup.<\/p><\/details><details><summary>Are offsite and offline the same thing?<\/summary><p>No. Offsite means another location; offline means a medium disconnected from any information system. The ANSSI, France&#8217;s national cybersecurity agency, recommends at least one offline copy or, failing that, an online offsite copy protected against deletion, for example by WORM storage.<\/p><\/details><details><summary>Do attackers really target backups?<\/summary><p>Yes. Mandiant&#8217;s M-Trends 2026 report describes ransomware groups that target backup infrastructure, delete backup objects in cloud storage and attack the directory and virtualisation layers, in order to prevent any restore and force payment.<\/p><\/details><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-46c5aec elementor-widget elementor-widget-text-editor\" data-id=\"46c5aec\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Further reading<\/h2><div class=\"wdb-g-related\"><a href=\"\/en\/guides\/backup\/should-you-outsource-backups\/\"><small>IT backup<\/small>Should you outsource your backups?<\/a><a href=\"\/en\/guides\/backup\/protect-backups-from-ransomware\/\"><small>IT backup<\/small>How do you protect your backups against ransomware?<\/a><a href=\"\/en\/guides\/backup\/where-to-store-backups\/\"><small>IT backup<\/small>Where should you store your backups?<\/a><a href=\"\/en\/guides\/backup\/what-is-an-immutable-backup\/\"><small>IT backup<\/small>What is an immutable backup?<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c0ba85b elementor-widget elementor-widget-text-editor\" data-id=\"c0ba85b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-sources\"><h2>Sources<\/h2><p class=\"wdb-g-src-date\">Documents consulted in October 2026.<\/p><ol><li><a href=\"https:\/\/messervices.cyber.gouv.fr\/documents-guides\/anssi_fondamentaux_sauvegarde_systemes_dinformation_v1.1.pdf\" target=\"_blank\" rel=\"noopener\">Backing up information systems \u2013 The fundamentals (ANSSI-BP-100, v1.1, 27 November 2025)<\/a> \u2014 ANSSI (French agency)<\/li><li><a href=\"https:\/\/nvlpubs.nist.gov\/nistpubs\/legacy\/sp\/nistspecialpublication800-34r1.pdf\" target=\"_blank\" rel=\"noopener\">SP 800-34 Rev. 1, Contingency Planning Guide for Federal Information Systems<\/a> \u2014 NIST<\/li><li><a href=\"https:\/\/cloud.google.com\/blog\/topics\/threat-intelligence\/m-trends-2026\/\" target=\"_blank\" rel=\"noopener\">M-Trends 2026: Data, Insights, and Strategies From the Frontlines<\/a> \u2014 Mandiant (Google Cloud)<\/li><li><a href=\"https:\/\/www.cnil.fr\/fr\/securite-sauvegarder\" target=\"_blank\" rel=\"noopener\">Security: back up your data<\/a> \u2014 CNIL (French authority)<\/li><li><a href=\"https:\/\/www.wedoback.com\/offre-immuable\/\" target=\"_blank\" rel=\"noopener\">IMMUTABLE offer: WORM storage and prices<\/a> \u2014 WeDoBack<\/li><\/ol><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c2f1797 e-con-full wdb-g-aside e-flex e-con e-parent\" data-id=\"c2f1797\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8910462 elementor-widget elementor-widget-text-editor\" data-id=\"8910462\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<nav class=\"wdb-g-toc\" aria-label=\"Table of contents\"><p>On this page<\/p><ol><\/ol><\/nav>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6713a31 elementor-widget elementor-widget-text-editor\" data-id=\"6713a31\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-card\"><h3>Planning a backup, DRP or BCP project?<\/h3><p>More than 20 years of experience protecting business data.<\/p><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-tel\" href=\"tel:+33972507828\">+33 9 72 50 78 28<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-d0c292a e-con-full wdb-g-cta e-flex e-con e-parent\" data-id=\"d0c292a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-9e2e53b e-con-full wdb-g-cta-in e-flex e-con e-parent\" data-id=\"9e2e53b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-46677d6 elementor-widget elementor-widget-text-editor\" data-id=\"46677d6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Protect your data with WeDoBack<\/h2><p>Encrypted offsite backup, immutable storage, DRP and BCP: tell us about your servers and we will recommend the right combination.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/offers-and-prices\/\">See offers and prices<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":32686,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"Offsite backup: why and how to do it | WeDoBack","_seopress_titles_desc":"An offsite backup survives fire, flooding and an attack that encrypts everything reachable on the local network.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/sites\/6\/2026\/10\/wdb-og-sauvegarde.jpg","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/sites\/6\/2026\/10\/wdb-og-sauvegarde.jpg","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":"","_members_access_role":[],"_members_access_error":""},"class_list":["post-32737","page","type-page","status-publish","hentry"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"_links":{"self":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32737","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/comments?post=32737"}],"version-history":[{"count":1,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32737\/revisions"}],"predecessor-version":[{"id":32992,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32737\/revisions\/32992"}],"up":[{"embeddable":true,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32686"}],"wp:attachment":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/media?parent=32737"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}