Backup Service you can rely on when it matters most
Daily encrypted backups with tested restore processes and contractually agreed recovery times — included in SLA maintenance plans from €199 per month. Because a backup that cannot be restored is not a backup.
from €199
SLA packages per month, backup service included
93 %
of data losses attributed to missing or defective backups (Acronis, 2023)
30 days
of daily restore points available retroactively
1 h
Recovery Time Objective (RTO) under the Enterprise SLA
An online shop contains far more than product images and text: customer data, order history, custom configurations, adapted templates and often years of development work. Data loss caused by a cyberattack, a failed server migration or human error can destroy this capital within hours. According to the Acronis Cyberthreats Report, 93 percent of reported data losses (Acronis, 2023) were attributable to inadequate or untested backup strategies. Our backup service closes this gap: fully automated, daily, encrypted storage and — crucially — with regularly verified restore tests. Combined with our monitoring service and security updates, this creates a complete protection concept for your shop — as part of an SLA maintenance contract or as a standalone service.
What a professional backup service must deliver
Many shop operators rely on their hosting provider's backup function without knowing what it actually backs up, how long retention lasts or whether the data could ever be restored. A professional backup service goes considerably further: it defines clear Recovery Point Objectives (RPO) — the maximum acceptable data loss expressed as a time span since the last backup — and Recovery Time Objectives (RTO), which specify how long a recovery may take. It stores backups at least at two geographically separate locations, encrypts the data and tests restore procedures at regular intervals to ensure the restore process will actually work in an emergency.
The silent risk: untested backups
Backup service included
- Daily backup with checksum and 30-day retention
- Restore tests documented in the monthly maintenance report
- Encrypted storage in German data centers
Part of every SLA maintenance contract — minimum term 6 months, all prices net.
Exactly what gets backed up
A complete shop backup consists of several components that together enable a reliable restoration. Only when all parts are present can the shop be returned to the backed-up state after a loss.
Database Backup
Complete MySQL or MariaDB dump including all tables, indexes, views and stored procedures. Contains customer data, order history, product catalog, pricing and all shop configurations.
File System Backup
Incremental backup of the entire file system: CMS core, plugins, themes, language files and all customized PHP files. Only changed files are transferred daily, reducing backup windows and storage requirements.
Media and Uploads
Product images, documents, PDFs, category images and all files uploaded through the shop. For external media storage (CDN, S3), their content is also included in the backup.
Configuration Files
Web server configuration, PHP settings, .htaccess, Shopware config.php, WordPress wp-config.php and all environment variables. These files are often critical for a successful restore.
Email and Cron Configuration
Stored email templates, cron job definitions and queue configurations. Particularly for Shopware shops with complex message queue systems, a frequently overlooked component.
SSL Certificates and Keys
Secure storage of SSL certificates and associated private keys. Enables rapid restoration of encrypted connections without requesting new certificates. We also offer a dedicated SSL certificate service.
Retention periods and storage locations
How long backups should be retained depends on the shop's requirements. A shop where errors sometimes only become apparent days later — after a data migration or system update — needs longer retention than a simple informational site. At the same time, storage costs increase with retention time. Our base configuration provides daily backups with a 30-day retention, weekly backups for three months and monthly backups for one year. Deviating requirements — for example for shops with demanding compliance obligations — are configured individually.
3-2-1 backup strategy
Why physical separation is essential
The proven 3-2-1 backup strategy states: at least three copies of data, on at least two different media types, with at least one copy at an off-site location. Our backup service implements this strategy consistently: the primary backup resides on a dedicated backup server logically separated from the production system. A second copy is held on an S3-compatible object storage in a German data center. The Enterprise SLA adds a third tier with geo-redundant storage. This ensures the backup remains accessible even if the primary backup server fails or — in the worst case — the entire server location is unreachable.
- Three copies: production system, backup server, S3 object storage
- Storage exclusively in German data centers
- Geo-redundant third tier under the Enterprise SLA
Our Backup Process in Detail
Initial assessment and configuration
We analyze your shop environment: database size, file system structure, the platform in use (Shopware, WordPress, TYPO3, Contao or others), external media storage and configuration files. Based on this analysis, we define the backup depth, intervals and retention periods individually for your shop.
Recovery Point Objective and Recovery Time Objective
RPO and RTO are the key metrics of any data protection concept. The Recovery Point Objective (RPO) defines how much data loss is acceptable in the worst case — expressed as the time since the last backup. With daily backups, the maximum data loss is 24 hours. Under the Business SLA, two backups per day lower the RPO to twelve hours; under the Enterprise SLA, multi-hourly backups reduce it to four hours.
The Recovery Time Objective (RTO) specifies the maximum permissible restoration time. Under the Basic SLA, our RTO is eight hours on business days; under the Business SLA four hours; and under the Enterprise SLA one hour — around the clock. These are contractually agreed targets, not non-binding estimates. Defined RTOs are particularly important for shops where extended outages have direct financial consequences — such as seasonal campaign shops or B2B portals with customer commitment contracts.
From alert to recovery: a documented procedure
What happens when a plugin update corrupts the database at night? This sample timeline shows how monitoring, on-call duty and tested restore processes work together: monitoring raises the alert, the on-call engineer isolates the cause, and the shop is restored from the last verified restore point — well within the agreed RTO.
- Every step logged with a timestamp in the incident report
- Recovery from verified, not untested, backups
- After every incident: root cause analysis and a report to you
Agree on RPO and RTO individually
What does the backup service cost?
The backup service is an integral part of every SLA maintenance contract — there is no separate surcharge for backups, storage or restore tests. Packages start at €199 per month net (Basic); revenue-critical shops usually choose Business at €349, business-critical systems Enterprise at €699 — each with a six-month minimum term. If maintenance and support are already handled elsewhere, you can book the backup service as a standalone offering; the terms depend on data volume and backup frequency. One-time recoveries without a contract are handled as immediate assistance at €95 per hour, billed in 15-minute increments.
Backup service across three SLA tiers
The backup service is an integral part of every SLA maintenance contract. All prices net per month, minimum term 6 months — full details on the SLA maintenance contract page.
Basic
For smaller shops and business websites with predictable backup needs.
- Daily backup of database and file system with checksum
- Retention: 30 days daily, 3 months weekly, 12 months monthly
- Two separate storage locations in German data centers
- Restore test at least once per quarter, documented
- Emergency recovery: RTO 8 hours on business days
Business
For revenue-critical shops that need short recovery times.
- All Basic services plus a second daily backup — RPO 12 hours
- Monthly restore test with integrity verification
- Emergency recovery: RTO 4 hours
- Weekend readiness for critical incidents
- Prioritized partial restore of individual data
Enterprise
For business-critical shops with high transaction volumes.
- Multi-hourly backups — RPO 4 hours
- Third, geo-redundant storage location
- Emergency recovery: RTO 1 hour, around the clock
- Monthly restore test plus annual emergency drill
- Secured read access to backup directories on request
All prices net plus VAT, minimum term 6 months. One-time recoveries without a contract are handled as immediate assistance at €95 per hour — details on the emergency support page.
Have your backup strategy reviewed
We check free of charge what your current backup actually covers and whether it can be restored in an emergency — with a clear recommendation for the right SLA tier.
Backup for different platforms
Every platform has its own backup specifics. Our service accounts for these differences and fully backs up platform-specific data and configurations. Beyond Shopware and WordPress — the most common platforms in our portfolio — we also support TYPO3, Contao, Drupal and Joomla. The platform-specific backup scripts are tailored to the respective database structure, directory layout and configuration formats.
- Shopware (CE/Open Source): database, file system, var/config/, custom/plugins/, public/media/, Enqueue configuration, App Config
- WordPress: database, wp-content/ (plugins, themes, uploads), wp-config.php, .htaccess, mu-plugins
- TYPO3: database, fileadmin/, typo3conf/, typo3temp/ (selective), extension configurations
- Contao: database, files/, templates/, system/config/, image cache (selective)
- Drupal: database, sites/default/files/, settings.php, private file paths
- Joomla: database, images/, templates/, configuration.php, extension files
Data protection and GDPR compliance in backups
Shop backups contain personal data: customer names, addresses, email addresses and order histories. The GDPR therefore places specific requirements on data backups. Our backup infrastructure meets these requirements: storage takes place exclusively on servers in Germany, data is AES-256-encrypted, access is restricted to authorized personnel and the retention period is documented and limited. We support you in correctly documenting the backup processes in your privacy policy and recording them in the processing register. We also offer the GDPR update service that monitors legal developments.
Backup service within the maintenance contract
The backup service is part of all our SLA maintenance contracts. In practice this means: when we manage a Shopware shop or a WordPress website under a maintenance contract, data backup is automatically included. The backup service can also be booked as a standalone service if you already have another provider for maintenance and support but want to professionalize your data protection strategy.
The backup service delivers its full benefit especially in combination with our monitoring service and security updates: when monitoring detects an attack or a critical error and the security update cleans the system, the backup stands ready as the last safety net to restore the state before the incident. This three-tier protection concept — prevention, detection and recovery — is the foundation of a robust shop infrastructure.
For shops in specific regions we also offer on-site support: whether in Hanover, Hildesheim or other locations in Lower Saxony — our technicians can provide personal assistance for complex recoveries.
Key takeaways
- Backup service included in SLA maintenance contracts from €199 per month — daily encrypted backups with no separate surcharge
- Every backup receives a checksum and resides at a minimum of two separate locations in Germany
- Restore tests at least quarterly, monthly under the Business and Enterprise SLA — documented in the maintenance report
- Contractually agreed recovery times: RTO 8 h (Basic), 4 h (Business), 1 h (Enterprise)
- GDPR-compliant: AES-256 encryption, storage exclusively in German data centers