Backup for a small office with no server

Where your data actually lives

Without a server, business data spreads across cloud services and devices. Email, calendars and shared files are typically in Microsoft 365 or Google Workspace. Accounting may be in Xero or MYOB. There might be a CRM, a booking system, a design tool, a project management app and a shared password manager. And there are always some files on laptops, saved to the Desktop or Downloads rather than a synced folder.

Start by listing each of these and noting who the account owner is, what data it holds and whether that data would be hard to recreate. That list shows what really needs protecting and often reveals forgotten apps that hold important information. It also tells you which accounts would hurt most if a password was stolen, which helps you decide where to put stronger sign-in protection first.

Protect the core cloud workspace

Your Microsoft 365 or Google Workspace tenancy is the heart of the business, so give it an independent backup that copies mail, files, shared sites and calendars daily to separate storage. This protects against deleted folders, compromised accounts, ransomware that syncs from a laptop and departing staff. It runs entirely in the cloud, so there is nothing to install in the office and no hardware to maintain.

Alongside the backup, lock down the accounts. Turn on multi-factor sign-in for everyone, limit administrator accounts to a couple of named people, and use conditional access or device rules where your licence allows. A secure tenancy with an independent backup covers most of the risk for a server-free office. Review sign-in logs and admin roles every few months.

Make laptops disposable

The aim is that losing any one laptop costs you a device, not data. Redirect Desktop, Documents and Pictures into OneDrive or Drive so files are stored in the cloud automatically. Encrypt every laptop and manage it centrally so it can be wiped remotely if lost. With that in place, a broken or stolen laptop can be replaced and set up from home in hours.

Some staff will still have local data, such as large media files or software that stores data on the device. For them, add an endpoint backup agent that sends those folders to the cloud whenever the laptop is online, and check its status weekly. Keep the number of people needing this small, because every local exception is something extra to manage and check.

Do not forget the other cloud apps

Smaller cloud apps are the most common gap. Your CRM, booking system or project tool may hold years of client history, but most small businesses never check what happens if a record is deleted or an account is compromised. Read each vendor's documentation on backups and data export, protect the logins with multi-factor sign-in, and export key data regularly, monthly for busy systems.

Some popular platforms can be backed up by third-party services. For others, a scheduled export saved into SharePoint or a shared drive, which is then covered by your main backup, is a practical compromise. Put the export on a calendar with a named owner, because manual exports are exactly the kind of task that quietly stops when people get busy. Check the exported files open properly the first time, so you know they contain what you expect.

What about the NAS or USB drive?

Some server-free offices still keep a NAS or external drive for photos, old archives or scanned files. If so, it needs backing up like any server: a copy to the cloud with its own credentials, and ideally an immutable or offline copy. A NAS is often the only place old records live, which makes it a common blind spot when everything else has moved online.

If the data on it is rarely used, consider moving it into an archive area in SharePoint or Drive, where it is covered by the main backup and the device can eventually be retired. Retiring it removes one more piece of ageing hardware, one more password and one more thing that could fail without warning.

Keep it simple and checked

Server-free does not mean IT-free. Someone still needs to check that the 365 or Workspace backup ran, that new staff were added, that laptops are syncing and that app exports happened. A short weekly check and a monthly test restore are enough for most small offices. Write down which tools protect what, where the logins and keys are kept, and how to start a restore.

Done this way, a ten-person office can be well protected with no hardware on site at all, and most problems, from a deleted folder to a stolen laptop, become routine fixes rather than emergencies. It is one of the clearest advantages of running a modern, cloud-first office, provided the backups are in place and someone keeps an eye on them.