Ets Merlaud: encrypted, monitored backups for an accounting server
Ets Merlaud runs a dedicated Windows server hosting its company directory, its accounting software and two databases. A backup existed, but nobody could say whether it was still good. Kapsloc took over the management of this server, rebuilt the backup chain with encryption and retention, and set up monitoring that alerts the same day when something fails.
The context
We first restored a freshness check: any backup older than 25 hours fails the chain and raises an alert, which ended the silent upload of outdated images.
The new chain runs on the server itself, scheduled nightly: hot backup of the two accounting databases, then restic upload of the dumps, application data and configuration to encrypted object storage in France, with 7-day / 4-week / 6-month retention, a weekly integrity check and a success-or-failure notification. The full system image is still produced locally for bare-metal restore. Secrets are protected by Windows encryption and the repository password is kept in the team vault.
An external pipeline acts as a watchdog: every night it checks that the backup actually ran and warns otherwise. A documented restore procedure is tested every quarter in an isolated folder, never directly in production.
During the takeover, the audit revealed that the system backup had been frozen for more than two years: the upload mechanism kept sending an old image every night, no alert flagged it, and the remote storage was full. A restore would have taken the company two years back.
The request: verified, encrypted backups hosted in France, with a clear retention policy and an immediate alert on failure, without adding to the team's daily workload.
A similar project?
Let's talk about it. Our team responds within 24 business hours.