Guide · Updated 2026-10-13
Cyber insurance and backups: what proof to have ready
Cyber insurance applications and renewals commonly ask about your backups. The exact questions differ by insurer, so confirm with your broker, but most small businesses are asked the same few things. Here is what to gather before the form arrives.
What applications commonly ask
- Do you back up critical systems and cloud data, including Microsoft 365?
- How often do backups run, and how long is history kept?
- Are backups immutable, offline or separated from your admin accounts?
- When did you last test a restore, and did it work?
Evidence worth keeping
- The date of the last successful backup, for each service.
- Your retention period and whether it is locked against deletion.
- The date and result of your last test restore.
- Where the data is stored, for example the cloud region.
- Who can delete or change backups, and how that is controlled.
What storiv shows today
In the storiv app you can see backup status, history and, on Business, locked retention of 3 years in S3 Object Lock governance mode. Data is stored in Canada.
A monthly report formatted for insurance applications, with automatic test restores, is planned but not built yet. We are talking to Canadian brokers about what insurers would accept before building it, and we will not claim it satisfies any insurer until they confirm.
A note on advice
storiv is not an insurer or a broker, and this page is not insurance advice. Ask your broker which backup controls your insurer requires.
Common questions
- Do cyber insurers require immutable backups?
- It depends on the insurer and the policy. Many applications ask about immutable or offline backups, so ask your broker what yours requires.
- What evidence of backups should I keep?
- The last successful backup date, retention and lock settings, the result of a recent test restore, and where the data is stored.
Want this covered for your tenant?
storiv is onboarding a waitlist first. Free for up to 5 users.
Join the waitlist