Backup and recovery in Surrey —
immutable, locally vaulted, tested.
Servnet designs and runs backup and recovery for Surrey businesses where data loss is not a recoverable event — pharma + life sciences (regulatory + validated estates), defence supply (NCSC-aligned), professional services (SRA-aware), schools (safeguarding + GDPR), and SCC. Veeam, Commvault, Rubrik or Veritas — sized for the workload, hardened against ransomware, restore-tested every quarter from the Fetcham HQ.
Why Surrey backup needs a sector-specific approach
Surrey concentrates sectors where data loss has regulatory consequences — pharma loses GMP-classified batch records, defence-suppliers breach MOD contract terms, schools breach KCSIE + GDPR, councils breach statutory record-keeping. Backup design starts from each sector's consequence model.
GxP-aware backup for pharma
For Surrey pharma + life sciences, backup is part of the validated environment — retention aligned to MHRA + GMP requirements, restore validation evidenced through the customer's QA system, change documentation GxP-aware.
NCSC-aligned for defence supply
For Farnborough / Aldershot defence supply clients, backup architecture maps to NCSC requirements and the prime-contractor flow-down — including the additional retention + immutability requirements MOD-tier customers expect.
Air-gapped vault at Pulsant Crowthorne or ARK Spring Park
For Surrey customers we run primary backup in one DC (or on-prem) with the air-gapped vault in a second Surrey-area DC — Pulsant Crowthorne, ARK Spring Park, Telehouse West, Equinix LD4 (Slough) — network-isolated from production.
KCSIE + safeguarding-aware school backup
For Surrey schools, backup includes safeguarding-classified data with appropriate retention (KCSIE-aligned) and DPIA-aware handling — alongside conventional MIS / SIMS data backup.
What Servnet backup delivers in Surrey
Veeam Data Platform deployments
Veeam Backup & Replication, Veeam ONE, Veeam Recovery Orchestrator, Veeam for M365, Veeam Hardened Repository — full deployment sized against data set + RPO / RTO.
Rubrik Security Cloud + r7000
For high-value Surrey customers requiring zero-trust, immutable-by-default backup with integrated ransomware investigation — Rubrik Security Cloud + Cloud Vault, r7000 appliance.
Commvault Cloud + HyperScale X
For larger Surrey enterprise customers — Commvault Cloud, HyperScale X appliances, Metallic for SaaS / M365 / Endpoint, plus Cyber Resilience for ransomware-isolated recovery.
M365 / Google Workspace SaaS backup
Independent backup of M365 / Workspace tenants — because Microsoft + Google don't back you up; they retain. Veeam for M365, Druva, AvePoint, Spanning.
Air-gapped vault at Surrey-area DC
Off-fabric, network-isolated vault at a second Surrey DC — typically Pulsant Crowthorne or ARK Spring Park — with credentials separated from production and immutable storage.
Quarterly restore exercises
For regulated Surrey customers we run quarterly tested restores from the Fetcham HQ — pick a workload, restore to isolated infrastructure, validate, time-box, document. Closes the loop for MHRA / NCSC / DSPT audit.
Surrey backup + recovery customers
- ▸Pharma + life sciencesEpsom / Cobham / Leatherhead pharma — Veeam or Rubrik against vSphere / Nutanix, MHRA-aligned retention, validated restore evidence, GxP-aware change documentation.
- ▸Defence + aerospaceFarnborough / Aldershot — NCSC-aligned backup architecture, MOD-tier retention + immutability, SC-cleared engineer attendance for sensitive restores.
- ▸Professional servicesGuildford / Woking law firms — practice-management database backup, client-file retention aligned to SRA, M365 mailbox + SharePoint protection.
- ▸Aviation supplyHeathrow / Gatwick area — 24×7 backup operations, operational-resilience-grade restore validation, aviation-aware change windows.
- ▸SchoolsSurrey independent + grammar schools — MIS / SIMS backup, safeguarding-classified data retention, M365 protection, GDPR-aligned DPIA.
- ▸SCC + district councilsSurrey County Council and 11 district councils — Crown Hosting / Azure workload backup, statutory record retention, NCSC-aligned restore validation.
How a Surrey backup engagement runs
Assessment + design — weeks 1–2
Existing-backup audit, RPO / RTO targets per workload, ransomware scenario stress-test of current design, regulator-mapping. Output is sized design and 12-month implementation plan. Often done in person for Surrey clients.
Hardware + software deployment
Backup repository hardware racked in agreed Surrey DC (Pulsant Crowthorne / ARK Spring Park / Telehouse West) or on-prem, software deployed, replication configured, immutability + air-gap configured.
First successful restore — week 6
No design signed off until a real restore has succeeded. Pick a non-critical workload, restore end-to-end to isolated infrastructure, document timing and result, hand evidence to customer.
Ongoing operations + quarterly testing
Day-to-day job monitoring, restore-on-demand for tickets, quarterly tested restores from Fetcham HQ documented for audit. Yearly DR table-top for regulated customers.
Surrey backup + recovery — common questions
What does "immutable" actually mean for our Surrey backup data?
Immutable backup is data even an admin with full credentials cannot delete or modify before retention expires. We achieve this via object-lock on AWS S3 / Azure Blob / on-prem object storage; via Veeam Hardened Repository (single-use Linux, no SSH); via Rubrik immutable-by-default; via Commvault Air Gap Protect. For pharma + defence + finance, immutability is not optional.
How do you protect a Microsoft 365 tenant — surely Microsoft does it?
Microsoft retains, they don't back up. Default retention is short, restore granularity limited. For any Surrey tenant of meaningful size we deploy a third-party M365 backup tool (Veeam for M365, Druva inSync, AvePoint, Spanning) with independent retention, point-in-time restore, tenant isolation from a ransomware-affected production estate.
Can you build us an air-gapped vault in a second Surrey DC?
Yes — typical design lands the primary backup in one Surrey DC (e.g. Pulsant Crowthorne) and the air-gapped vault in a second (ARK Spring Park or Telehouse West) with network isolation, immutable storage, credentials separated from production.
Do you do quarterly restore testing for a Surrey pharma customer?
Yes — for pharma + life sciences customers we schedule quarterly tested restores tied to the customer's QA calendar: pick a workload, restore to isolated infrastructure, validate, document against the customer's validation requirements, file evidence into the QA audit pack.
How quickly can you recover a ransomware-encrypted Surrey estate?
For a typical 100-VM estate with Veeam or Rubrik and immutable repositories: critical-service restore to isolated recovery infrastructure within 4–8 hours, full estate recovery 24–72 hours depending on data volume. Surrey proximity helps — engineers attend in person for the restore.
How do you price backup for a 100-VM Surrey firm?
Three components — software licence (Veeam / Rubrik / Commvault per VM or per TB), backup target hardware (typically £25–55k for a properly sized repository pair), implementation services (typically £15–30k for design + deployment + first restore). Annual support and quarterly restore testing on top.
Other services we deliver in Surrey
Need Surrey backup that survives a regulator review or ransomware incident?
Send the workloads and the RPO / RTO you need — we can come to your Surrey office to scope, or you can come to ours at KT22 9BJ.