Santa Clarita Stays Running
Almost every office has backups. Far fewer know how much work a restore would cost them, how long the office would sit idle, or whether the backup would survive the same attack that took the servers. Those are three different questions, and they have answers before an incident or excuses after one.
The two numbers nobody asks you for.
Every real recovery plan is built on these. Most providers quote a backup product instead and let you find both numbers out during the incident.
How much can you afford to lose
The recovery point. It is measured in time, not files: if backups run nightly, your worst case is one day of re-entry. For a practice, that is every chart note, payment, and appointment change since the last run, re-keyed from memory and paper.
Shortening it costs money. Knowing the number costs nothing, and it is the one that decides whether nightly is actually good enough for you.
How long can you afford to be down
The recovery time. A dental office with a full schedule and a legal practice mid-filing have very different answers, and both are different again from the back-office file server.
This is why recovery is prioritized rather than uniform. Something comes back first. Deciding which in advance is the whole job.
Both are set per engagement and written down, so expectations are explicit and the gaps are deliberate rather than discovered. Ask any provider for their two numbers in writing. That question, and seventeen more, are published free at Observe Adapt Protect.
What immutable actually prevents.
Modern ransomware hunts the backups first, because an operator who can restore does not pay.
Offsite is not the same as safe
A copy stored elsewhere but reachable with the credentials sitting on your network is a copy the attacker deletes on the way through. That is the standard failure, and it is why the backup being offsite is answering the wrong question.
Immutable, and what that costs us
Copies are written to Backblaze B2 under Compliance-mode Object Lock. Once written, a copy cannot be altered or deleted before its retention expires by any party, including SecureLynx and our own personnel, with no early-release mechanism.
That cuts both ways honestly: we cannot delete it early for you either, which is stated in the agreement rather than discovered later.
Immutable backup is included in the regulated tier and available as an add-on to any managed plan. It is deliberately not part of the base managed price, and the managed IT page says the same. For regulated practices the retention lengths also carry compliance weight, and the backup of cloud-hosted data is covered under cloud solutions.
What a tested restore actually means.
A backup nobody has restored is an assumption. Here is how it stops being one.
The first real restore
Data is brought back to working systems, not just verified as present. It is an onboarding milestone that cannot be marked complete without the date it was actually run.
On a schedule
Testing continues at intervals set per engagement, because environments drift: a new server, a new application, a changed share, and yesterday's proven restore covers something that has moved.
Dated, and yours
The result lands in your Compliance Portal with a date on it, which is also what an insurer or auditor asks for when they ask whether backups are tested.
Priority order
Systems come back in the order agreed in advance rather than the order someone thinks of at 6am with the phones ringing.
What it costs, and what you sign.
All of it is a promise until you can check it. The pricing calculator returns a firm number for your own environment, and all six agreements are published in full. Four clauses that decide what happens to your data:
Certain backup copies are held under immutable, Compliance-mode Object Lock and, by design, cannot be altered or deleted by any party, including SecureLynx and its personnel, before their retention period expires.
Client shall have fifteen (15) calendar days to retrieve or request an export of its recoverable backup data at no additional charge. SecureLynx will provide reasonable retrieval assistance during this window.
Any SecureLynx-assisted data recovery, export, or migration requested in connection with termination will be billed at SecureLynx's standard rate and will not exceed one thousand dollars ($1,000) in the aggregate.
Where Backup and Disaster Recovery is not included under Section 10, no immutable copies are created and this subsection (d) does not apply.
Read them in context rather than trusting the excerpt. The last one is a limit, not a promise, and it is here for that reason: immutability applies where backup is an elected service component, and a page implying every client gets undeletable copies would be describing someone else's engagement.
Retention runs up to six months for regulated-tier clients and up to three months for unregulated, covering medical and dental practices and accounting firms whose regulators expect recoverable history. The detection side of a ransomware incident sits under cybersecurity.
Resilience Begins Before Disruption.
Run your own numbers, read the agreements, then call. Serving the Santa Clarita Valley and Southern California.
Disaster recovery, answered.
What does disaster recovery include?
Backup planning, defined recovery priorities, continuity preparation, and tested restores, so that when hardware fails, ransomware hits, or an outage lands, the systems that matter most come back first and in a known order. Disaster recovery is included in our regulated tier and available as an add-on to any managed plan, scoped per engagement rather than bundled into the base managed price.
What are RPO and RTO, in plain words?
Two numbers that decide what a real recovery plan costs. Recovery point objective is how much work you can afford to lose, measured in time: back up nightly and your worst case is a lost day. Recovery time objective is how long you can afford to be down before the loss stops being an inconvenience. Most providers never ask, quote a backup product, and leave you to discover both numbers during the incident. We set them per engagement, in writing, before anything is deployed.
Where do the backups live, and can ransomware reach them?
Backups are encrypted and copied to immutable offsite storage with Backblaze B2. Immutable means a copy, once written, cannot be altered or deleted before its retention period expires, by any party, including SecureLynx and its own personnel. That is the specific property that defeats modern ransomware, which now hunts backups first. Data is encrypted at rest and in transit, and retention is scaled to your tier and needs.
Do you actually test that backups can be restored?
Yes. A backup nobody has restored is an assumption, not a safeguard. The first restore test is an onboarding milestone that cannot be marked complete without the date it was actually run, and it is visible to you in your Compliance Portal. Testing continues on a schedule set per engagement.
Can you guarantee zero data loss?
No honest provider can promise zero loss, and anyone who does is selling you something. What we can do is make the loss deliberate rather than accidental: planned backups, defined restore priorities, and recovery and downtime targets set per engagement so the gaps are chosen with you and written down in advance.
What happens to our backups if we leave?
SLA Section 13 gives you fifteen (15) calendar days from the service end date to retrieve or export your recoverable backup data at no additional charge, with reasonable retrieval assistance from us. Any SecureLynx-assisted recovery, export, or migration is capped at one thousand dollars ($1,000) in aggregate. You can also elect in writing to keep the recoverable set maintained beyond the window for $150 a month. Copies already under immutable Object Lock persist to the end of their retention period and are then automatically purged, which is a security property rather than a hold on your data.
What areas do you serve?
SecureLynx serves the Santa Clarita Valley and the surrounding region: the full San Fernando Valley, Pasadena, Glendale, Burbank, Palmdale, Lancaster, Castaic, Ventura, and the communities in between. Our SLA targets on-site response within sixty (60) minutes inside the Santa Clarita Valley; elsewhere in Southern California, on-site timing varies with distance and conditions.