Zum Inhalt springen
Proactive security updates

Backup Service you can rely on when it matters most

Daily encrypted backups with tested restore processes and contractually agreed recovery times — included in SLA maintenance plans from €199 per month. Because a backup that cannot be restored is not a backup.

In SLA plans from €199 per month Daily verified backups Documented restore tests

from €199

SLA packages per month, backup service included

93 %

of data losses attributed to missing or defective backups (Acronis, 2023)

30 days

of daily restore points available retroactively

1 h

Recovery Time Objective (RTO) under the Enterprise SLA

An online shop contains far more than product images and text: customer data, order history, custom configurations, adapted templates and often years of development work. Data loss caused by a cyberattack, a failed server migration or human error can destroy this capital within hours. According to the Acronis Cyberthreats Report, 93 percent of reported data losses (Acronis, 2023) were attributable to inadequate or untested backup strategies. Our backup service closes this gap: fully automated, daily, encrypted storage and — crucially — with regularly verified restore tests. Combined with our monitoring service and security updates, this creates a complete protection concept for your shop — as part of an SLA maintenance contract or as a standalone service.

Backup by the 3-2-1 rule
From snapshot to a confirmed restore
Every backup passes four stations — only a passed restore test makes a backup dependable.
Backup 03:00
AES-256 encryption
Integrity check
Restore test
Last backup03:00Checksum OK
Restore points30/3030 days back
Restore test June38 minRTO: 4 h
Current RPO12 hSLA met
3 copies · 2 media · 1 off-site
Backup server (DE)in sync
S3 object storage (DE)in sync
Geo-redundancyEnterprise
Retention
EncryptionAES-256 active
Retention30 d / 3 m / 12 m
Weekly restore testpassed
SLA packagesfrom €199 per month
Backup today 03:00successful · verified
Backup control center of our managed service: backup history, checksums, storage locations and restore tests at a glance. Sample view — values are illustrative.

What a professional backup service must deliver

Many shop operators rely on their hosting provider's backup function without knowing what it actually backs up, how long retention lasts or whether the data could ever be restored. A professional backup service goes considerably further: it defines clear Recovery Point Objectives (RPO) — the maximum acceptable data loss expressed as a time span since the last backup — and Recovery Time Objectives (RTO), which specify how long a recovery may take. It stores backups at least at two geographically separate locations, encrypts the data and tests restore procedures at regular intervals to ensure the restore process will actually work in an emergency.

The silent risk: untested backups

A backup that has never been restored could be corrupt, incomplete or simply no longer accessible. Without regular restore tests you will not discover this problem until it is too late. That is why the restore test is an integral part of our backup service — not an optional add-on.

Backup service included

from €199 per month net
  • Daily backup with checksum and 30-day retention
  • Restore tests documented in the monthly maintenance report
  • Encrypted storage in German data centers

Part of every SLA maintenance contract — minimum term 6 months, all prices net.

Exactly what gets backed up

A complete shop backup consists of several components that together enable a reliable restoration. Only when all parts are present can the shop be returned to the backed-up state after a loss.

Database Backup

Complete MySQL or MariaDB dump including all tables, indexes, views and stored procedures. Contains customer data, order history, product catalog, pricing and all shop configurations.

File System Backup

Incremental backup of the entire file system: CMS core, plugins, themes, language files and all customized PHP files. Only changed files are transferred daily, reducing backup windows and storage requirements.

Media and Uploads

Product images, documents, PDFs, category images and all files uploaded through the shop. For external media storage (CDN, S3), their content is also included in the backup.

Configuration Files

Web server configuration, PHP settings, .htaccess, Shopware config.php, WordPress wp-config.php and all environment variables. These files are often critical for a successful restore.

Email and Cron Configuration

Stored email templates, cron job definitions and queue configurations. Particularly for Shopware shops with complex message queue systems, a frequently overlooked component.

SSL Certificates and Keys

Secure storage of SSL certificates and associated private keys. Enables rapid restoration of encrypted connections without requesting new certificates. We also offer a dedicated SSL certificate service.

Retention periods and storage locations

How long backups should be retained depends on the shop's requirements. A shop where errors sometimes only become apparent days later — after a data migration or system update — needs longer retention than a simple informational site. At the same time, storage costs increase with retention time. Our base configuration provides daily backups with a 30-day retention, weekly backups for three months and monthly backups for one year. Deviating requirements — for example for shops with demanding compliance obligations — are configured individually.

3-2-1 backup strategy

Why physical separation is essential

The proven 3-2-1 backup strategy states: at least three copies of data, on at least two different media types, with at least one copy at an off-site location. Our backup service implements this strategy consistently: the primary backup resides on a dedicated backup server logically separated from the production system. A second copy is held on an S3-compatible object storage in a German data center. The Enterprise SLA adds a third tier with geo-redundant storage. This ensures the backup remains accessible even if the primary backup server fails or — in the worst case — the entire server location is unreachable.

  • Three copies: production system, backup server, S3 object storage
  • Storage exclusively in German data centers
  • Geo-redundant third tier under the Enterprise SLA
Retention by 3-2-1AES-256 active
Daily backup30 days
Weekly backup3 months
Monthly backup12 months
Transfer via SFTP/S3Geo-redundancy under Enterprise SLA

Our Backup Process in Detail

Recovery Point Objective and Recovery Time Objective

RPO and RTO are the key metrics of any data protection concept. The Recovery Point Objective (RPO) defines how much data loss is acceptable in the worst case — expressed as the time since the last backup. With daily backups, the maximum data loss is 24 hours. Under the Business SLA, two backups per day lower the RPO to twelve hours; under the Enterprise SLA, multi-hourly backups reduce it to four hours.

The Recovery Time Objective (RTO) specifies the maximum permissible restoration time. Under the Basic SLA, our RTO is eight hours on business days; under the Business SLA four hours; and under the Enterprise SLA one hour — around the clock. These are contractually agreed targets, not non-binding estimates. Defined RTOs are particularly important for shops where extended outages have direct financial consequences — such as seasonal campaign shops or B2B portals with customer commitment contracts.

From alert to recovery: a documented procedure

What happens when a plugin update corrupts the database at night? This sample timeline shows how monitoring, on-call duty and tested restore processes work together: monitoring raises the alert, the on-call engineer isolates the cause, and the shop is restored from the last verified restore point — well within the agreed RTO.

  • Every step logged with a timestamp in the incident report
  • Recovery from verified, not untested, backups
  • After every incident: root cause analysis and a report to you
From alert to recoverySample scenario
02:14
Monitoring reports database error
after a faulty plugin update
02:19
On-call engineer alerted
cause isolated
02:31
Restore initiated
from backup 03:00 the previous day
03:26
Shop back online
checkout tested
Total duration72 minRTO Business: 4 h
Incident report08:00delivered in the morning

Agree on RPO and RTO individually

Depending on industry and shop size, RPO and RTO have different priorities. In the initial consultation we discuss which values make sense for your specific operation and align backup frequency, storage setup and SLA tier accordingly. Learn more about our SLA models.

What does the backup service cost?

The backup service is an integral part of every SLA maintenance contract — there is no separate surcharge for backups, storage or restore tests. Packages start at €199 per month net (Basic); revenue-critical shops usually choose Business at €349, business-critical systems Enterprise at €699 — each with a six-month minimum term. If maintenance and support are already handled elsewhere, you can book the backup service as a standalone offering; the terms depend on data volume and backup frequency. One-time recoveries without a contract are handled as immediate assistance at €95 per hour, billed in 15-minute increments.

Backup service across three SLA tiers

The backup service is an integral part of every SLA maintenance contract. All prices net per month, minimum term 6 months — full details on the SLA maintenance contract page.

Basic

For smaller shops and business websites with predictable backup needs.

€199 per month
  • Daily backup of database and file system with checksum
  • Retention: 30 days daily, 3 months weekly, 12 months monthly
  • Two separate storage locations in German data centers
  • Restore test at least once per quarter, documented
  • Emergency recovery: RTO 8 hours on business days
Request Basic
Most popular

Business

For revenue-critical shops that need short recovery times.

€349 per month
  • All Basic services plus a second daily backup — RPO 12 hours
  • Monthly restore test with integrity verification
  • Emergency recovery: RTO 4 hours
  • Weekend readiness for critical incidents
  • Prioritized partial restore of individual data
Request Business

Enterprise

For business-critical shops with high transaction volumes.

€699 per month
  • Multi-hourly backups — RPO 4 hours
  • Third, geo-redundant storage location
  • Emergency recovery: RTO 1 hour, around the clock
  • Monthly restore test plus annual emergency drill
  • Secured read access to backup directories on request
Request Enterprise

All prices net plus VAT, minimum term 6 months. One-time recoveries without a contract are handled as immediate assistance at €95 per hour — details on the emergency support page.

Have your backup strategy reviewed

We check free of charge what your current backup actually covers and whether it can be restored in an emergency — with a clear recommendation for the right SLA tier.

Backup for different platforms

Every platform has its own backup specifics. Our service accounts for these differences and fully backs up platform-specific data and configurations. Beyond Shopware and WordPress — the most common platforms in our portfolio — we also support TYPO3, Contao, Drupal and Joomla. The platform-specific backup scripts are tailored to the respective database structure, directory layout and configuration formats.

  • Shopware (CE/Open Source): database, file system, var/config/, custom/plugins/, public/media/, Enqueue configuration, App Config
  • WordPress: database, wp-content/ (plugins, themes, uploads), wp-config.php, .htaccess, mu-plugins
  • TYPO3: database, fileadmin/, typo3conf/, typo3temp/ (selective), extension configurations
  • Contao: database, files/, templates/, system/config/, image cache (selective)
  • Drupal: database, sites/default/files/, settings.php, private file paths
  • Joomla: database, images/, templates/, configuration.php, extension files

Data protection and GDPR compliance in backups

Shop backups contain personal data: customer names, addresses, email addresses and order histories. The GDPR therefore places specific requirements on data backups. Our backup infrastructure meets these requirements: storage takes place exclusively on servers in Germany, data is AES-256-encrypted, access is restricted to authorized personnel and the retention period is documented and limited. We support you in correctly documenting the backup processes in your privacy policy and recording them in the processing register. We also offer the GDPR update service that monitors legal developments.

Backup service within the maintenance contract

The backup service is part of all our SLA maintenance contracts. In practice this means: when we manage a Shopware shop or a WordPress website under a maintenance contract, data backup is automatically included. The backup service can also be booked as a standalone service if you already have another provider for maintenance and support but want to professionalize your data protection strategy.

The backup service delivers its full benefit especially in combination with our monitoring service and security updates: when monitoring detects an attack or a critical error and the security update cleans the system, the backup stands ready as the last safety net to restore the state before the incident. This three-tier protection concept — prevention, detection and recovery — is the foundation of a robust shop infrastructure.

For shops in specific regions we also offer on-site support: whether in Hanover, Hildesheim or other locations in Lower Saxony — our technicians can provide personal assistance for complex recoveries.

Key takeaways

  • Backup service included in SLA maintenance contracts from €199 per month — daily encrypted backups with no separate surcharge
  • Every backup receives a checksum and resides at a minimum of two separate locations in Germany
  • Restore tests at least quarterly, monthly under the Business and Enterprise SLA — documented in the maintenance report
  • Contractually agreed recovery times: RTO 8 h (Basic), 4 h (Business), 1 h (Enterprise)
  • GDPR-compliant: AES-256 encryption, storage exclusively in German data centers

Frequently asked questions about the backup service

By submitting you consent to the processing of your details to handle this request. Details in our privacy policy.