Skip to content

Professional firms

A nightly copy, a current certificate and no odd warnings.

A firm’s website flagged as not secure loses enquiries before anybody reads a line.

The firm’s website is copied whole every night away from the server that serves it, the restore is tested and the security certificate renews itself, which are measures article 32 of the GDPR requires you to be able to demonstrate.

Last reviewed:

In a firm, the padlock gets looked at twice

Anybody about to leave their phone number on a firm’s form is about to share something that matters to them. If the browser says the site is not secure, they do not leave it. The certificate is there from day one and renews itself, precisely so that doubt never arises.

Being able to restore is an obligation, not a precaution

Article 32 of the GDPR requires being able to restore the availability and access to personal data in a timely manner after an incident, and regularly verifying that the ability works. In a professional firm, where the bar is high because of the information handled, it is one of the things worth being able to demonstrate.

What gets kept

The page for each area, which took time to write and review; the team profiles; the notes and alerts with their dates; the legal texts; and the consultation requests received. It is not the case file — that lives in your document system with its own backups — but it is everything else.

And testing it before needing it

The restore test happens cold, on a quiet day. A firm cannot afford to discover on a Monday morning that the copy was incomplete, not least because it would have to explain that to somebody.

The same thing, explained in general: Daily backups

What we do about it

Part of the maintenance: you never have to ask, and it is never billed apart.

  • A full copy every night Pages, team, notes and requests received.
  • Kept off the server If the machine is the problem, the copy does not go with it.
  • The restore tested Tested cold, with a record kept.
  • Security certificate Renewed on its own, with no warnings to scare anyone off.
  • Security updates The server kept current with nothing for you to approve.
  • Restore on request You tell us, we pick the point and leave it as it was.

And this you change with one sentence

You write what you want changed and we publish it.

I have deleted an area page

Recovered exactly as it was yesterday.

A «not secure» warning is showing

We look at it the same day: nearly always content loaded without encryption.

I want a copy for our own archive

Prepared and handed over whenever you ask.

Frequently asked questions

Are case files included in this copy?

No. Case files live in your document system, with their own backups and their own requirements. This is about the website.

Does this make me GDPR compliant?

It covers the part of article 32 that depends on the website. The rest is the firm’s data protection officer’s work.

How long does a restore take?

For one page, minutes. For everything, longer, and we give you the estimate at the start.

What if somebody attacks the site?

The server is kept updated and watched. If something happens, we tell you what we know, when we know it.

Where all this comes from

Every figure and every rule quoted above, linked to the official text.

When was your website backup last tested?

If nobody knows, there is no tested backup. We will set it up and show you the restore working.

Write to us