Data backup for small business: a plain-English plan for New Jersey offices

A data backup for small business is a second copy of your files, email and records, stored where the thing that breaks your first copy cannot reach it, and tested so you know it restores. For most offices that means at least one copy in the cloud, one copy that is offline or locked against deletion, and a restore test on a schedule. The hard part is not buying backup software. It is knowing what you actually have to protect, where it lives, and how long you can work without it. This guide walks through that in plain terms for a small New Jersey office.

What a small business backup actually has to cover

Most owners think of backup as "the server" or "the files on the office computer." In a service business today, the records that keep the doors open are spread across five or six places, and several of them are not on any computer you own.

• Shared files and documents. Estimates, contracts, forms, photos of past jobs. Often on a shared drive, a NAS box in the closet, OneDrive, Google Drive or Dropbox.
• Email. Quotes, approvals and customer threads live in Microsoft 365 or Google Workspace mailboxes.
• Your customer record. The CRM or job management system with every customer, address, job history and open quote.
• Accounting. QuickBooks or similar, plus payroll exports.
• Practice or line-of-business software. Dental charting and imaging, a law office's document system, a dispatch board.
• Phone system settings and call records. Extensions, call routing, voicemail and, if you use one, the transcripts your answering service or AI voice agent writes to the CRM.
• The computers themselves. How long it takes to rebuild a front-desk PC with the right printers, scanners and software is part of your recovery time.

Write each one down with three things next to it: where it lives, who the vendor is, and whether anything is backing it up today. That list is the plan. Everything else is choosing how to fill the gaps.

The 3-2-1 rule for small business backups, in plain terms

The common rule of thumb is 3-2-1: keep three copies of important data, on two different kinds of storage, with one copy off site. It is a sensible floor, not a guarantee. Ransomware changed what "off site" has to mean, because a cloud folder that syncs with your PC can sync the damage too.

Federal guidance is blunter. CISA's ransomware guide tells organizations to maintain offline, encrypted backups of critical data and to regularly test the availability and integrity of those backups in a disaster recovery scenario, because many ransomware variants look for reachable backups and delete or encrypt them. The FTC's advice for small businesses says the same in one line: set up offline, off-site, encrypted backups of information essential to your business.

For a small office, that usually works out to this:

• Copy 1: the live data where you work every day.
• Copy 2: an automatic, versioned backup to a separate cloud backup service, not just the sync folder.
• Copy 3: a copy that cannot be changed from your network, either an offline drive that is disconnected and rotated, or cloud storage with deletion protection (object lock or immutable storage) turned on.

Sync is not backup

This is the most common gap in small office backups. OneDrive, Google Drive and Dropbox keep files in step across devices. That is useful, but if a file is deleted or encrypted on one computer, the change can spread everywhere. Version history and recycle bins help, but they have time limits, they depend on the vendor's settings, and an attacker with your login can empty them.

The same goes for Microsoft 365 and Google Workspace mailboxes, and for most cloud software. The vendor keeps its service running. Getting back the mailbox an employee wiped before leaving, or a CRM record someone overwrote by mistake, is usually on you. Check each vendor's export and restore options, and back up the ones that matter to a place the vendor does not control.

How to choose: what each backup option is good for

Decide how much you can afford to lose

Two numbers drive every backup decision, and they are business questions, not IT ones.

• How much work can you redo? If the backup runs nightly, a failure at 4pm loses a day of quotes, notes and bookings. If that is too much, back up more often.
• How long can you be down? A dental practice without its schedule on a Monday morning has a different answer than a contractor whose office manager can work from a phone for a day.

Answer both for each system on your list. The CRM and scheduling usually need the tightest answers, because they hold the jobs you have already won. If phones and booking stay up while the office computers are being restored, you keep taking calls. A cloud phone system with calls forwarded to cell phones or a cloud answering agent covers that. Our VoIP vs landline guide covers the phone side of an outage plan.

Data backup for small business: a checklist for New Jersey offices

1. List every system that holds business data: files, email, CRM, accounting, line-of-business software, phone system.
2. For each, write where it lives, the vendor, and what is backing it up today.
3. Turn on automatic, versioned backup for office PCs, any server and any NAS box.
4. Add a separate backup for Microsoft 365 or Google Workspace mailboxes and shared drives.
5. Set a schedule to export CRM and accounting data, and name the person who owns it.
6. Keep one copy offline or in deletion-protected storage, encrypted.
7. Turn on multi-factor authentication for the backup service and keep its admin login separate from everyday accounts.
8. Run a restore test every quarter: pick a real file, a real mailbox and one full computer, and time how long each takes.
9. Write a one-page recovery sheet: who to call, where the backups are, which systems come back first.
10. Review the list whenever you add software, hire, or let someone go.

New Jersey adds its own reasons to do this before you need it. A nor'easter or a summer storm can knock out power and cable for days along the shore in Ocean and Monmouth counties, and a flooded office closet takes the NAS box with it. If your only backup sits in the same building, it is not off site.

Where backups fit with the rest of the system

Backups protect the record. Connect Helm's job is keeping that record complete in the first place: every call answered, every caller written into one CRM record, every quote followed up. The managed IT behind it, including networks, security and backup, comes from our partner Watchman IT. If you want an outside look at where your gaps are before something fails, our one-time audits include a website security audit and an authorized penetration test, each with a written report and a prioritized fix list.

Frequently asked questions

How often should a small business back up its data? Often enough that losing everything since the last backup would not hurt. For most offices that means continuous or at least daily backups of the CRM, email and shared files, with an offline or locked copy refreshed on a regular schedule.

Is OneDrive or Google Drive enough of a backup? Not on its own. Sync tools copy deletions and encrypted files across devices, and their recycle bins and version history have limits. Use them for daily work and add a separate, versioned backup on top.

What is the 3-2-1 backup rule? Keep three copies of important data, on two different types of storage, with one copy off site. Because of ransomware, make sure at least one of those copies is offline or protected from deletion.

How do I know my backups actually work? Restore from them. Pick a file, a mailbox and a full computer each quarter, restore them to a test location, and time it. A backup you have never restored is a guess.

Next step

Want to hear what keeps answering the phone while the office is down? Call the demo line; it is the same AI agent that answers Connect Helm's own number, and it tells callers it is an AI. To talk through backups, phones and CRM for your office, book a call, and see how the pieces fit together on the packages page. We quote after one conversation.