---
title: "Managed Disaster Recovery with Contracted RPO and RTO"
description: "Managed disaster recovery: RPO and RTO in the contract, immutable copies against ransomware, ready replicas and tested recovery. No-commitment proposal."
language: en
url: https://www.dataroad-it.com/en/disaster-recovery-services-portugal/
source: https://www.dataroad-it.com/en/disaster-recovery-services-portugal/
publisher: DataRoad IT (DataRoad - IT Services and Consulting), Portugal
---

> Managed disaster recovery: RPO and RTO in the contract, immutable copies against ransomware, ready replicas and tested recovery. No-commitment proposal.

# Managed Disaster Recovery with Contracted RPO and RTO

At a glance For decision-makers short on time.

- 01 Disaster recovery sets in writing how much work is lost (RPO) and when operations resume (RTO).
- 02 Immutable copies, replicas of critical servers and a runbook stored outside the infrastructure.
- 03 One full test a year and partial tests each quarter, with real times compared to the RTO.
- 04 Full plan included in Premium 365; on Essential and Premium, it is contracted as a project.

**Every hour of server downtime is revenue that does not come in, clients left without answers and staff paid to wait. Managed disaster recovery from DataRoad - IT Services and Consulting, one of Portugal's reference providers of managed IT services, turns that uncertainty into two signed commitments: the RPO (how much work can be lost) and the RTO (how quickly operations resume), confirmed in real tests.** We design it for organisations that cannot afford to stop, such as hotels, clinics, firms with legal deadlines, embassies and logistics operators, from our headquarters in Alfragide and with support across Portugal.

## What does it cost a business to have backups but no plan?

It costs days. A backup proves the information survived; it does not say which machine it is restored to after a fire, who runs the operation, in what order or by when. We know companies with flawless backups that were out of action for 72 hours because no one had these answers.

| Decision point | Backups only | Recovery plan |
| --- | --- | --- |
| What it guarantees | The information exists outside the server | The date and time the business starts invoicing again |
| Coverage | Documents, databases, email | Entire servers, network, access, applications, people and processes |
| Proof of success | Yesterday's restore ran without errors | The last test came in within the RTO |
| Weak point | Missing or damaged backup | Valid backup, but no destination and no one prepared |
| Threats | Accidental deletion, corrupted database | Ransomware, fire, flood, theft, long power or network outage |

[Managed backup with local and off-site copies and verified restores](https://www.dataroad-it.com/en/managed-backup-services-portugal/) is the foundation. Planned recovery is the structure built on top of it.

## Which figures are signed?

### RPO: the limit on lost work

The *Recovery Point Objective* expresses the maximum acceptable loss in time. Set at 24 hours, the worst case costs a day of records; set at 15 minutes, it requires near-continuous replication. A clinic with 80 appointments a day and an accounting firm at month-end will never have the same figure.

### RTO: the deadline to return

The *Recovery Time Objective* measures the gap between the disaster and critical systems coming back online. It dictates the architecture: two days of leeway needs only a restore destination; two hours needs replicas already in place. It is written into the contract and timed in every test.

Both are defined per system, based on the calculated cost of one hour without operating. The ERP may demand minutes; the archive, days.

## How do you survive a ransomware attack?

In Portugal, the most likely disaster is not fire but encryption spreading through the network at night. A plan built for this attack has three barriers that generic plans ignore.

- **Immutability** Copies that not even stolen administrator credentials can encrypt or delete.
- **Network quarantine** Segmentation carried out before restart, so the replica is not infected.
- **Identified clean point** The most recent copy may already contain the malicious code; we choose the safe version.

Without preparation, the problem becomes one of [business data recovery](https://www.dataroad-it.com/en/business-data-recovery-servers-raid-nas/): slower, more expensive and with no guarantee of success. The subject links to [managed cybersecurity](https://www.dataroad-it.com/en/managed-cybersecurity-services/) and to the obligations of the [NIS2 directive in Portugal](https://www.dataroad-it.com/en/nis2-compliance-portugal/).

## What do we deliver, phase by phase?

- **Business impact**: which systems bring the company to a halt, how much downtime is bearable and the cost of each hour.
- **3-2-1 with immutability**: three copies, two media, one off-site and an unalterable version for what is critical.
- **Replicas in place**: critical servers replicated in a data centre in Portugal or in the cloud, with no waiting for new hardware.
- **Client contact assured**: phone and email working while the main infrastructure is down, including the [cloud or on-premises phone system](https://www.dataroad-it.com/en/cloud-vs-on-premises-phone-system-cost/) and Microsoft 365.
- **Activation runbook**: who declares the disaster, who is called, restore sequence, contacts and credentials, stored outside the affected systems.
- **Documented tests**: one full test a year and partial tests each quarter, with real times set against the RTO.
- **Orderly return**: moving back from the replica to the main infrastructure without losing what was produced during the crisis.

## What documents does the board receive?

- **Impact map** RPO, RTO and estimated hourly cost for each system.
- **Backup inventory** Location, frequency, immutable versions and retention depth.
- **Activation runbook** Owners, start-up order and credentials held off-network.
- **Contact plan** How clients continue to be served during the outage.
- **Test reports** Timed results and approved corrective actions.

Chosen by respected and international companies

★★★★★ 5,0 · 52 Google reviews

★★★★★ 5,0 · 52 Google reviews

## Where has it already been proven?

Through a [2022 public contract](https://www.dataroad-it.com/en/massama-monte-abraao-server-ups-backups/), the União das Freguesias de Massamá e Monte Abraão entrusted DataRoad with a new server, a UPS system and corporate backups. Processing capacity, power that withstands outages and recoverable information: at a public service counter, stopping means failing citizens.

The [ongoing management contract](https://www.dataroad-it.com/en/massama-monte-abraao-it-estate-management/), renewed by public tender, combines monitoring and support under Premium 365 (24×7), so that failures are stopped before they reach the public.

## Which plan includes it and how long does it take?

Managed backup and monitoring are part of every [IT Unlimited](https://www.dataroad-it.com/en/managed-it-services/) plan. The full solution, with replicas, written runbook and tests, is included in [IT Unlimited Premium 365](https://www.dataroad-it.com/en/premium-365-24-7-managed-it/), the tier for those who cannot stop; Essential and Premium clients contract it as a project. It works alongside the [NOC, continuous on Premium 365](https://www.dataroad-it.com/en/noc-it-monitoring-portugal/), and the rest of our [managed IT services](https://www.dataroad-it.com/en/managed-it-services-networks-security-cloud/).

For 20 to 50 workstations with one or two servers, allow four to eight weeks: two to four for analysis and design, and another two to four for replicas and immutable copies. The first full test takes place within the following three months.

We always start with the board, because only management knows the real value of an hour without operating. If you already have backups and simply want to know whether you could recover from them, we run that test separately, as an [IT consultancy project with a report](https://www.dataroad-it.com/en/it-consulting-diagnosis-before-investment/).

## Questions management asks us

### Aren't nightly backups enough?

No, backups guarantee that the data exists, but they do not say where, by whom and how quickly the company gets back to work. A disaster recovery plan sets, before the crisis, the restore destination, the people responsible, the start-up sequence and the signed deadline. Without it, a perfect copy can still mean days of downtime.

### What is the right RTO for our company?

The right RTO is the longest interval the company can tolerate without serious harm, calculated from the real cost of an hour without operating. Deadlines of a few hours require live replicas and cost more; one or two days can be met with off-site copies and standby equipment. The impact analysis sets the value system by system, with real figures.

### Where are our server replicas kept?

Replicas are kept in a data centre in Portugal, in the cloud or both, depending on the RTO and data location requirements. The decision depends on the target recovery time, the data volume and each sector's legal obligations. The choice and its rationale are recorded in the plan and reviewed whenever the infrastructure changes.

### How often is recovery tested?

One full test a year and partial tests every quarter, all with a written report. In every test the actual recovery time is measured and compared with the contracted RTO. If it falls short, the report proposes corrections and the next test confirms them. A plan that has never been tested is only an intention.

### Is disaster recovery the same as business continuity?

No, disaster recovery is the technology component of business continuity. Continuity also covers people, premises, suppliers and processes. DataRoad is responsible for the IT part: copies, replicas, network, access and communications. We coordinate with whoever manages the rest, so the technology plan fits the company's overall plan.

### Who gives the order to activate, and when does recovery start?

Management declares the disaster according to criteria written into the plan, and DataRoad carries out the recovery. On Premium 365, with 24/7 cover including nights, weekends and public holidays, execution starts at any hour. On the other plans, start-up follows the contracted hours and SLA, which should weigh on the choice of plan.

### How much does it cost and which plan includes it?

Managed backup and monitoring are part of every IT Unlimited plan, from €395/month + VAT. Full disaster recovery, with replicas, an activation manual and tests, is included in Premium 365, from €1,200/month + VAT. On Essential and Premium it is contracted as a project, with a fixed price after the impact analysis.

## Where do we work?

Headquartered in Alfragide with support across Portugal, we design and test plans for Portuguese companies and for international companies in Portugal, Europe and the US. See our managed networks and IT pages for [Lisbon](https://www.dataroad-it.com/en/lisbon-msp-managed-networks-it/), [Cascais](https://www.dataroad-it.com/en/managed-networks-it-cascais/), [Oeiras](https://www.dataroad-it.com/en/managed-networks-it-oeiras/), [Sintra](https://www.dataroad-it.com/en/sintra-msp-managed-networks-wifi-it/), [Leiria](https://www.dataroad-it.com/en/industrial-networks-managed-it-leiria/), [Coimbra](https://www.dataroad-it.com/en/managed-networks-it-coimbra-central-portugal/) and [Porto](https://www.dataroad-it.com/en/managed-networks-it-porto/), or the full map of [service areas](https://www.dataroad-it.com/en/it-support-coverage-portugal/).

Read next: [could you withstand 8 hours without power or internet?](https://www.dataroad-it.com/en/blackout-proof-network-infrastructure-business/) · [backup restore in 30 minutes](https://www.dataroad-it.com/en/managed-backup-30-minute-restore-test/) · [what an hour of downtime is worth](https://www.dataroad-it.com/en/cost-of-it-downtime-calculation/).

## Next step: measure your real time to recover

Not the time you would like, the time you can actually achieve. The first analysis is no-commitment. We provide this service only under an IT Unlimited contract; we do not carry out one-off jobs or sell standalone equipment.

**More than 10 workstations · support contract · remote, on-site and phone support.**

+351 211 459 950 * (weekdays, 9:00–13:00 and 14:00–18:30) · sales@dataroad.pt

**Call to a Portuguese landline.*

News

## Projects delivered and news from DataRoad.

[See all news →](https://www.dataroad-it.com/en/news/)

[NewsFrance Affiches: three sites, no single point of failureA French group founded in 1984 hands a Portuguese MSP the infrastructure of Antony, Wissous and Vialonga: high-availability firewalls, fibre…25 October 2026 · 4 min read](https://www.dataroad-it.com/en/france-affiches-it-three-sites-paris-lisbon/)[NewsSSAP: a managed business wireless network with 14 access pointsA sixth project for the same public body since 2019: when a tender goes to the same company again, it is the previous network doing the talk…12 October 2026 · 6 min read](https://www.dataroad-it.com/en/ssap-managed-wireless-network-14-access-points/)[NewsManaged cybersecurity: one architecture, no incidents in 11 yearsThe same security architecture for every client, operated rather than merely installed. In 11 years, DataRoad has never suffered a security …12 October 2026 · 8 min read](https://www.dataroad-it.com/en/managed-cybersecurity-single-architecture/)[NewsManaged Ubiquiti UniFi: more than 138 sites and 1321 devicesA network made of different brands and installers fails at the joins. DataRoad has managed more than 138 Ubiquiti UniFi sites on the same te…10 October 2026 · 3 min read](https://www.dataroad-it.com/en/managed-ubiquiti-unifi-networks/)[NewsFrance Affiches: an on-site IT audit in ParisA premium Portuguese MSP at a French group's headquarters: the audit of France Affiches' network and systems was done on site in Paris and d…10 October 2026 · 4 min read](https://www.dataroad-it.com/en/france-affiches-it-audit-paris/)[NewsManaged remote support for companies without a fixed officePaying for a provider's offices speeds nothing up. Immediate remote support, an in-house datacentre and on-site work only when the network c…8 October 2026 · 5 min read](https://www.dataroad-it.com/en/managed-it-remote-companies-europe-usa/)[News24 public IT contracts: the standard of RTP, Técnico and SSAPA public tender gives no second chances. Since 2017, eight public bodies, from RTP to SSAP, have awarded DataRoad 24 IT contracts, all verif…3 October 2026 · 5 min read](https://www.dataroad-it.com/en/public-contracts-it-partner-rtp-tecnico-ssap/)[NewsEmbassies and international groups: why they choose DataRoadEmbassy of Korea, Consulate of Brazil, DCIAP, Reltio by SAP, beQom, Mitrelli Group: organisations that demand written guarantees chose DataR…12 September 2026 · 4 min read](https://www.dataroad-it.com/en/embassies-international-groups-msp-portugal/)[NewsDataRoad in five languages: managed IT for overseas head officesWhoever chooses the IT partner for a subsidiary in Portugal is often in Geneva or New York. DataRoad's website now speaks the language of th…12 September 2026 · 4 min read](https://www.dataroad-it.com/en/managed-it-services-five-languages/)

Numbers you can verify

**11** years in business

**232** clients

**< 10 min** average response time

**15+** IT vendor certifications

**10+** Countries with clients supported

**5.0 ★** 52 Google reviews

Transparency

## What many providers hide, we publish.

[See plans and prices →](https://www.dataroad-it.com/it-unlimited/)

- **Prices upfront** Essential from €395/month + VAT, Premium from €750 and Premium 365 from €1,200.
- **No lock-in** Annual contract, no lock-in and no joining fees.
- **Everything in writing** What is included, the scope and the price, before you sign.
- **Support without counted hours** Remote and phone in every plan; on-site support from Premium.

Partners and certifications

DataRoad · Managed cybersecurity

## One StepAhead of IT.

The risk belongs to the board, the protection is ours. In 11 years, DataRoad has never suffered a security incident.

- **11** years in business, since 2015
- **Top 5%** SMEs · scoring.pt
- **0** DataRoad security incidents in 11 years

We do **IT** right.

Contact

## Have your backups ever been put to the test?

Automated, monitored backups stored off site.

Phone +351 211 459 950 * *Call to a Portuguese landline

Sales email sales@dataroad.pt

Headquarters Avenida dos Moinhos 12 B, 2610-119 Alfragide, Portugal

More than 10 workstations · support contract · remote, on-site and phone support

DataRoad works only for companies under an IT Unlimited contract. We do not take subcontracted work or one-off call-outs.

---
Versão HTML desta página: https://www.dataroad-it.com/en/disaster-recovery-services-portugal/