Backup and recovery in Cambridge —
immutable, regulator-grade, restore-tested.
Servnet designs and runs backup and recovery for Cambridge businesses where data loss is not a recoverable event — AstraZeneca-supplier under GxP retention, NHS CP trusts under DSP Toolkit, Cambridge University research under funder-aligned retention (UKRI / Wellcome / Cancer Research UK), Silicon Fen tech under SOC 2. Veeam, Commvault, Rubrik or Veritas — restore-tested quarterly.
Why Cambridge backup needs to clear a higher bar
Cambridge concentrates regulated estates and high-value research IP — AstraZeneca life-sciences, NHS CP at Addenbrooke's, Cambridge University funded research. Backup design starts from "assume the production estate is compromised".
GxP retention for AstraZeneca-supplier
For Cambridge life-sciences customers, backup retention aligns to GxP requirements for batch records, clinical-trial data and research IP.
NHS DSP Toolkit assertion 9.4
For NHS CP ICB-affiliated organisations, DSP Toolkit assertion 9.4 requires demonstrable backup and recovery.
Funder-aligned retention for research
For Cambridge University research customers, backup includes funded-project data with retention aligned to UKRI, Wellcome, CRUK, Gates Foundation requirements.
SOC 2 evidence for Silicon Fen tech
For Cambridge tech businesses with SOC 2 obligations, backup design and evidence directly support the Availability + Processing Integrity criteria.
What Servnet backup delivers in Cambridge
Veeam Data Platform deployments
Veeam Backup & Replication, Veeam ONE, Veeam Recovery Orchestrator, Veeam for M365, Veeam Hardened Repository.
Rubrik Security Cloud + r7000
For high-value Cambridge customers — Rubrik Security Cloud + Cloud Vault.
Commvault Cloud + HyperScale X
For larger Cambridge enterprise customers.
M365 / Workspace SaaS backup
Independent backup of M365 / Workspace tenants. Microsoft retains, doesn't back up.
Air-gapped vault in second Cambridge DC
Off-fabric, network-isolated vault at a second Cambridge DC — typically Synergy CAM if primary is Pulsant CAM.
Quarterly restore exercises
For regulated customers — quarterly tested restores, validated, documented for DSPT / GxP / SOC 2 audit.
Cambridge backup + recovery customers
- ▸AstraZeneca + life sciencesAstraZeneca-supplier + Cambridge biotech — Veeam or Rubrik with GxP-aligned retention, MHRA-aware handling.
- ▸NHS CP trustsCUH (Addenbrooke's), CPFT, NWAFT — clinical-system backup, DSP-Toolkit-aligned retention.
- ▸Cambridge University + 31 collegesCambridge University departments + colleges — research-data backup, funder-aligned retention (UKRI / Wellcome / CRUK).
- ▸Silicon Fen techCambridge Science Park scale-ups — AWS / Azure backup, SOC 2-aligned retention.
- ▸Arm + Microsoft ResearchArm Holdings + Microsoft Research Cambridge — production data backup, US-customer-aware retention.
- ▸CCC + Cambs CC + 4 districtsCCC + Cambs CC + 4 districts — backup of Crown Hosting / Azure workloads, statutory record retention.
How a Cambridge backup engagement runs
Assessment + design — weeks 1–2
Existing-backup audit, RPO / RTO targets, ransomware scenario stress-test, regulator-mapping.
Hardware + software deployment
Backup repository racked in agreed Cambridge DC.
First successful restore — week 6
Pick a non-critical workload, restore end-to-end to isolated infrastructure.
Ongoing operations + quarterly testing
Day-to-day job monitoring, restore-on-demand, quarterly tested restores documented for audit.
Cambridge backup + recovery — common questions
What does "immutable" actually mean for our Cambridge backup data?
Data even an admin with full credentials cannot delete or modify before retention expires.
How do you protect a Microsoft 365 tenant — surely Microsoft does it?
Microsoft retains, they don't back up. For any Cambridge tenant of meaningful size we deploy a third-party M365 backup tool.
Can you build us an air-gapped vault in a second Cambridge DC?
Yes — typical design lands primary in one DC (Pulsant CAM) and air-gapped vault in a second (Synergy CAM or Cambridge DC).
Do you do quarterly restore testing for an AstraZeneca-supplier with GxP requirements?
Yes — for life-sciences customers we schedule quarterly tested restores aligned to GxP / MHRA evidence requirements.
How quickly can you recover a ransomware-encrypted Cambridge estate?
For a typical 150-VM estate with Veeam or Rubrik and immutable repositories: critical-service restore within 4–8 hours, full estate recovery 24–72 hours.
How do you price backup for a 100-VM Cambridge firm?
Three components — software licence, backup target hardware (typically £25–55k), implementation services (£15–30k).
Other services we deliver in Cambridge
Need Cambridge backup that survives a regulator review or ransomware incident?
Send the workloads and the RPO / RTO you need.