Choosing help before a disaster, not after one

Your backup solution should already be running smoothly before disaster strikes—yet most businesses only think about it when they've already lost something. The real difference between a provider worth hiring and one that'll leave you scrambling comes down to honest alignment: whether they treat prevention as their job, and whether you can trust they've actually solved the problem before selling it to you.

How they prove they've tested their own work

A provider who can't show you a recent, documented restore test is telling you they don't know if their backups work. This is the single clearest dividing line. When you ask "When did you last restore from a backup to verify it works?", listen for specifics: a date, a scenario, what they found and how they fixed it. Vague reassurance—"our backups always work" or "we test regularly"—means they probably haven't.

Ask them to walk you through their last restore on a client system similar to yours. Did they restore to the original location, a staging environment, or both? Did they verify file integrity, application functionality, and data consistency? A mature provider will have a formal test schedule and logs to show you. They should also be able to name one thing they've broken and fixed during testing—that's a sign they're actually learning.

Another telling detail: do they restore part of your data, or everything? Some backups look fine in the log but fail silently on a subset of files. Ask whether they verify a sample every time, or run full restore tests on a rotation. If they can't explain their validation method, they're guessing.

Where they're actually keeping your data

This shapes both cost and risk, but the question isn't cloud versus on-site—it's whether they've thought through what happens if their primary storage fails. Ask where your backups live physically: which data centre, which region, which provider. Then ask where the copies are. If they say "cloud", ask which cloud provider, in which geography, with what redundancy. If they say "on-site", ask what sits across the network or geographically distant as a failsafe.

A provider hedging their bets will have backups in multiple locations or with multiple vendors, not all in one place. They should be able to tell you exactly how long it takes them to recover data from each location, because that timing matters when you're down. A backup sitting on a single server in Johannesburg that also got encrypted by ransomware is not a backup—it's a false comfort.

Press them on access too. If your data is in a private data centre, who controls it? If it's in the cloud, is it encrypted in a way only you hold the key to? Can you retrieve it if your provider goes under or holds it hostage? Providers who are transparent about this have usually faced hard questions from other clients and know the answers.

What speeds them to restore when you actually need them

Speed matters most under pressure, and pressure is when poor processes break. Ask about their recovery time objective—how fast they commit to getting you back online—and recovery point objective—how much data loss you'll accept. But more important than what they promise is how they prioritise when multiple clients are in crisis at once.

Do they have a tiered SLA, or does everyone get treated the same? Can you pay for priority, or is your recovery slot decided by whoever called first? What happens if a restore fails halfway through? Do they have a second person who can take over, or does one person own your entire recovery?

Ask them directly: if you need emergency recovery on a Friday night, who answers and what's their process? If they name a person rather than a process, and that person gets hit by a bus, you're stuck. If they answer with a process—escalation paths, backup techs on call, documented runbooks—they've thought it through.

The providers worth hiring are the ones who tell you what could go wrong, show you how they've already fixed it, and let you verify the fix before you need it. That's the work that happens before disaster, which is exactly when it matters most. When you're ready to find someone serious about this foundation, Strove lists verified IT support providers with details on their testing practices and infrastructure so you can compare on what actually counts.