Loss of customer backup data in a data centre failure

Customer backups are written first to a repository in the same suite as the platform they protect. A fire or a long power failure in that suite could destroy the production data and its local backup together.

Measures

Every backup job also copies to the Harbourlight offsite storage in a third location, and the Backup and Storage Engineer restores a sample from there every six months. The restore tests of the last two rounds found no failed copy.