Skip to content

Backup4 min read

Backup Retention: How Long Should You Keep Backups?

Backup retention decides how far back you can restore a deleted or overwritten file. No single period fits every company, so confirm what your plan keeps.

, founder of Ghostworx

An open filing drawer packed with old cards and folders

The short version

In a hurry? Start here.

Backup retention decides how far back you can restore a deleted or overwritten file. It should reach past the longest a mistake could go unnoticed in your office, and since no single period fits every company, get your plan’s answer in writing.

Quick answers

What does backup retention mean?
Backup retention is how long your backup keeps older versions of files, which sets how far back you can restore. If the good version was dropped before anyone noticed a mistake, the backup can’t restore it.
How far back should our backups go?
Your backups should reach back at least seven days, the minimum the federal cybersecurity agency CISA recommends. Beyond that, it depends on how long a mistake could go unnoticed in your office.
Is backup retention the same as how long we keep business records?
No, backup retention is about getting back a deleted or overwritten file. How long to keep contracts or tax papers, and whether a legal hold applies, are questions for your accountant or counsel.
In this article3 sections
  1. Mistakes are often found late
  2. A backup isn’t an archive or a records file
  3. Get your plan’s answer in writing

Backup retention is how long your backup holds on to older versions of your files, and so how far back a restore can reach. Having a backup isn’t enough on its own. The right version has to still be in it on the day someone notices the problem.

For the bigger picture, see our guide to data backup for contractors.

Mistakes are often found late

Someone deletes the estimate you already sent, saves over the invoice spreadsheet your bookkeeper still uses, or clears out a folder of walkthrough photos. Often the person who notices isn’t the one who made the change. They open the folder and find the wrong file, or nothing at all.

What you need back is the version from before that change, and it has to still be in the backup when someone notices. A copy that was taken and then dropped before anyone looked won’t give you the file back.

One file, from the good version to discovery

  1. Earlier good version

    The file before the bad change

    Date

  2. Bad change

    Deleted or overwritten

    Date

  3. Discovery

    When someone notices

    Date

  4. ?

    Still recoverable?

    Does the backup still hold the good version on the discovery date?
Fill in the dates as you learn them. Only your provider can answer the last question for your account.

As a floor, CISA (the federal Cybersecurity and Infrastructure Security Agency) says to test your backups to make sure you can roll data back at least seven days. Beyond that, no single period fits every company. How far back you need depends on how late a bad change might be noticed in your office.

That varies by file. An estimator might catch a bad total the same afternoon, while a project manager might not open a photo folder until a customer asks about the job. Note the likely timing next to each kind of file, because the slow discoveries are the ones your retention has to cover.

A backup isn’t an archive or a records file

A backup is a copy you restore when a file is deleted or overwritten, so your office can get back to work on it. An archive is a separate place for older files you no longer open every day, like a closed job’s photos or a finished bid. Both hold older material, which is why people mix them up. But moving a folder into an archive tells you nothing about whether the estimate from before an overwrite can still be restored.

Keeping business records is a third job. How long you have to keep contracts and tax papers, and whether a legal hold (a request to preserve files) applies, are questions for your accountant or counsel. Your backup’s retention doesn’t settle them. Ask in writing, and keep the answer with the job file.

Get your plan’s answer in writing

Say an estimate is deleted or overwritten and your office notices later. For the account or folder it lived in, ask your provider:

  • How far back can a deleted or overwritten file be restored?
  • Is that history the file’s own version list, kept with it in the same folder, or a separate backup kept apart from it?
  • Where is the answer written: the quote, the service plan or the settings for this account?

The reply should say which of the two still holds the earlier estimate, and where that’s written down. Your office fills in the details of the file. The provider’s answer fills in what the plan keeps and where it’s written. Keep the finished sheet with the quote for that account.

Retention worksheet for one file

FileThe estimate, invoice sheet or photo folder
Blank, to fill in
Account or folderWhere the file lived
Blank, to fill in
What happenedDeleted or overwritten
Blank, to fill in
When someone noticesSame day, weeks later, or at a later review
Blank, to fill in
Version neededThe copy from before the bad change
Blank, to fill in
What the plan keepsYour provider’s answer for this account
Blank, to fill in
Where that answer is writtenQuote, service plan or account setting
Blank, to fill in
Separate questionHow long to keep the record, or a legal hold. Ask your accountant or counsel.
Blank, to fill in

Two related choices are separate from retention. How often you back up a work computer is a different decision from how long versions are kept. And backup testing is how you check, later, that a restored file actually opens.

If Ghostworx handles your backup

Ghostworx backs up the business email and cloud files your coverage plan lists, kept separately from Microsoft or Google, and checks and test-restores the backups. How long versions are kept is written in your quote. Copy that line onto the worksheet, and leave the field blank until the quote names it. The full list of what’s covered is on our security and backup page.

Not sure how far back your backups go?

Ghostworx backs up your business email and cloud files, checks the backups and test-restores them.

See Security and BackupOr call (253) 893-6160

Hand off the IT. Keep running the jobs.

Tell us who needs covering and what keeps breaking. Justin replies within 1 business day with questions or a quote.