What Small Businesses Should Back Up That They Usually Don't
TL;DR: Backing up your Documents folder is a start, not a finish. Small businesses regularly lose email archives, cloud app data, custom software configs, and network settings because those never made it into the backup plan. This list covers the gaps most recovery failures trace back to.
Ask most small business owners if they have a backup, and they'll say yes. Ask them what's actually in it, and the conversation gets quiet fast. A backup that misses the wrong things is just a false sense of security. Here's what tends to fall through the cracks.
1. SaaS and Cloud App Data
This one surprises people every time. If you use QuickBooks Online, Salesforce, HubSpot, or similar cloud tools, you probably assume the vendor backs it up. Technically, they back up their infrastructure. Your specific account data is a different story.
Most SaaS providers operate under a shared-responsibility model. They keep the service running; you are responsible for your own data exports and backups. Read the fine print.
Export critical records on a schedule, or use a third-party SaaS backup tool that pulls your data automatically.
2. Email Archives and Rules
People back up files but forget that email is also a business record. Contracts, purchase orders, client conversations, compliance-relevant threads. All of it lives in inboxes that often have no independent backup.
Worse, even when email is backed up, the rules, signatures, shared mailbox configurations, and distribution lists are rarely included. Rebuilding those after a migration or failure is tedious and error-prone.
If you're on Microsoft 365, built-in retention policies help but are not the same as a restorable backup. A proper Microsoft 365 backup solution gives you point-in-time restore for mailboxes, SharePoint, and Teams, not just archiving.
3. Network and Firewall Configurations
Your router, managed switch, and firewall all have configurations that took time to build: VLANs, firewall rules, port forwarding, VPN settings, DNS entries. None of that lives in your file backup.
If a device fails or needs to be replaced, rebuilding from memory takes hours and introduces errors. A simple exported config file, stored securely off-site, turns a multi-hour outage into a 20-minute restore.
This applies to your Wi-Fi access points too, especially if you've segmented guest vs. internal networks. Check your business networking setup and export configs regularly.
4. Custom Software Settings and License Keys
Specialty software used in construction, legal, medical, or trades often has settings that are deeply customized: templates, custom fields, user roles, integrations. The installer is not the configuration.
License keys are also routinely lost. If the machine dies and you can't find the key, you may be buying software again that you already own. Keep a secure, updated record of every license key and activation email.
Tired of IT that breaks at the worst time? Talk to our business IT team
5. Local QuickBooks and Accounting Files (If Desktop-Based)
If you run QuickBooks Desktop or any locally installed accounting software, that company file needs its own explicit backup. It is not always in your Documents folder. It's not always included in a general file backup. Confirm the actual file path and make sure it's in scope.
Accounting data is often the most painful thing to lose and the hardest to reconstruct.
6. Employee and System Credential Stores
Passwords managed locally, SSH keys, API tokens, and stored credentials in browsers or local password vaults can all disappear in a hardware failure. If your team uses a shared admin password document (you should migrate to a proper password manager, but that's another conversation), verify it's backed up and encrypted.
7. Website Files and Database
If your website runs on WordPress or a similar CMS, your hosting provider may offer automated backups, but frequency and retention vary wildly. A plugin conflict or hack can wipe out a site, and a 30-day-old backup from your host is not the same as a current one.
Back up your site database and files independently, store them somewhere you control, and test restores occasionally. This is especially true for e-commerce sites where orders and customer data are involved.
8. Shared Drives and Collaboration Folders
Google Drive, SharePoint, Dropbox, and similar tools sync files, but sync is not a backup. If someone deletes or corrupts a file, the deletion or corruption syncs too. Version history helps but has limits on retention.
Map out what actually lives in shared drives vs. what employees assume is backed up. The gap is usually significant.
Bottom Line
A backup plan that only covers the obvious stuff will fail at the worst moment. The items above are consistently what small businesses discover they're missing after a failure, not before.
If you're not sure what your current backup actually covers, that's worth finding out now. Fix My PC Store offers backup and disaster recovery planning for small businesses in West Palm Beach and South Florida, along with managed IT services that keep this stuff monitored so it doesn't fall off your radar. Reach out if you want a second set of eyes on your setup.
Tired of IT that breaks at the worst time?
We run managed IT, backups, and security for South Florida businesses so you can stop thinking about it.