A suitable backup arrangement depends on which files your organisation must restore, how quickly you need them and whether your internet connection can handle both backup and recovery. A removable drive can provide local access without an internet connection, while cloud storage keeps a copy off-site; if connected storage or loss of the premises is a concern, keep genuinely separate copies and test that you can restore them.
If your work depends on current documents, contacts or records, check how to restore actual files—not just whether a backup exists. The National Cyber Security Centre (NCSC) advises identifying the information essential to day-to-day operations.
If your connection is slow or unreliable, consider how you would back up and restore files without relying on it. The NCSC notes that cloud storage requires a reliable internet connection; keep removable backup media disconnected between backup sessions.
If backup copies contain customer information, consider who can access them, how credentials or encryption keys are managed, and how long the information remains recoverable. The Information Commissioner's Office (ICO) says that retention should reflect how long the information is needed.
For small organisations in the UK, the NCSC advises identifying essential data and notes that cloud backup needs a reliable internet connection. Compare the backup route against the files you need, the recovery you can carry out and the routine you can maintain.
| Concern | What to check when buying | Who this matters to |
|---|---|---|
| Restoring essential operations | List essential files, set a backup schedule and test restoring a sample file and, where relevant, a larger working set. | If I need current documents and records to keep working, I want to know that a real restore is practical; consumers who put operational recovery first make up around 28%. |
| Independence from internet or connected systems | Check upload and recovery requirements, and decide when a removable copy will be connected, disconnected and stored. | When internet access is unreliable or connected copies are a concern, I need a workable local or disconnected route; consumers who prioritise independent or offline access account for around 22%. |
| Protecting customer information | Identify who can access backups and how encryption, recovery keys and any cloud-provider arrangements are managed. | If backups hold customer information, I want to control who can reach or change the copies; consumers who put controlled access first represent around 22%. |
| Capacity for the planned backup | Measure the selected files and allow for the versions or additional copies you intend to keep. | When the file set is growing, I need enough room for the files and planned versions; consumers who prioritise capacity make up around 17%. |
| A maintainable routine | Check how backup status, retention, deletion and restoration are managed, and who will test the process. | If several people share responsibility, I need a routine the organisation can keep up and test; consumers who prioritise manageable upkeep account for around 11%. |
A copy that remains accessible from affected systems may be exposed in an incident involving connected storage. The NCSC describes ransomware affecting connected USB and network backup drives.
Check whether a separate copy is genuinely disconnected or otherwise protected, and test restoring it.
A selected file set and its retained versions may exceed the capacity you choose.
Measure the files you intend to protect and decide which versions need to remain available before choosing a capacity.
Version history and retention settings affect whether an older or deleted file can still be recovered. Backblaze documents a 30-day default version history for Computer Backup.
Check and test the retention settings for the service and plan you use.
A connected drive may be exposed to incidents affecting the computer or systems it is meant to help protect. An online service that backs up the same drive may also apply its own disconnected-drive retention policy.
Plan when to connect and disconnect the drive, and check that this routine works with any service retention settings.
My Passport, Works with USB-C is a removable hard-drive line to consider when local backup capacity is a priority.
The T7 Shield portable SSD is a removable-storage option to consider when a portable drive or frequent large-file transfers matter.
IronKey Vault Privacy 50 has USB-A and USB-C variants to consider for a selected set of files that needs encrypted removable storage.
Hyper Backup is relevant if your organisation uses, or is considering, a compatible Synology NAS and wants scheduled copies to a separate destination.
Computer Backup for Business is a service route to consider for Mac and PC file backups rather than a removable-storage purchase.
These Joybuy products are removable external drives for local copies. Match capacity and connection details to your intended files, then disconnect removable storage between backup sessions.
No image available
Consider this portable SSD for a local copy when the stated capacity and USB connection suit your backup set.
1 TB; USB Type-C; USB 3.2 Gen 2; optional AES-256-bit hardware encryption.
Check host compatibility and keep the drive disconnected when it is not being used for backup.
No image available
Consider this desktop drive if its stated capacity fits a larger local backup set.
22TB; USB 3.0; password protection with hardware encryption; backup software; PC and Mac compatibility stated in the product name.
Check that the connection suits your device and disconnect the drive between backup sessions.
No image available
Consider this portable hard drive for a local copy when 4TB suits the selected files and planned versions.
4TB; 256-bit AES hardware encryption; password protection; scheduled backup software.
Check device compatibility and keep the drive disconnected between backup sessions.
No image available
Consider this portable hard drive for selected operational files if 2TB is enough for the planned copies.
2TB; 256-bit AES hardware encryption; password protection; scheduled backup software.
Check device compatibility and keep the drive disconnected when it is not being used for backup.
No image available
Consider this desktop drive for a local backup set if its stated capacity fits the files and versions you plan to keep.
8TB; exFAT formatting; backup software; password protection with hardware encryption.
Check device compatibility and disconnect the drive between backup sessions.
Measure the files you intend to protect, then allow for the versions or additional copies in your backup plan. Check the exact model: the cited examples include a 128GB encrypted USB device, a 1TB portable SSD and a 6TB portable hard drive, not universal capacity targets.
Not if your plan relies on a copy being offline or separate from connected storage. The NCSC reports ransomware affecting connected USB and network backup drives. A compatible NAS can send copies to another destination, but configure and test that separate route.
Check that the expected files are present and restore a representative file; periodically test the copy and recovery point you intend to rely on. A backup-status indicator alone does not show that essential working files can be recovered.
The ICO says UK data-protection law does not specifically require encryption of all personal information. Security measures should be appropriate to the risk, so consider the information held and how the backup is stored, moved and accessed.
Check access controls, retention, restoration and how the provider processes the information. The ICO says a written contract or other legal act is required when a controller uses a processor; if a restricted international transfer is involved, the UK transfer rules need assessment.