How MSPs Package Backup and Recovery as a Subscription That Actually Restores

 An MSP technician checks nightly backup job results across several client accounts

Some businesses often try to own a backup. But a few will say how long a full restore would take, or whether the last good copy still exists. That gap is actually where downtime turns into a very costly week. 

Managed service providers sits actually in the middle of it. Sometimes they sell sell backup as a monthly service, and the way they structure and bill that service decides whether restores work when a client needs them.

Why Backup Works Better as a Subscription

A one-time backup purchase ages when it’s installed. Staff join and leave, data volumes grow, and retention have to change. A recurring model keeps the contract, the licences and the storage allocation tied to what a client genuinely runs today.

Take a 40-seat accounting firm. Its MSP bills per protected device plus a per-GB storage line every month, so adding a laptop or a new file server reveals on the next invoice without anyone renegotiating. Providers and distributors that function recurring cloud and software subscriptions through a billing platform such as infiterra.com can meter seats and storage usage without the spreadsheet drift that quietly leaves devices unprotected.

The subscription also makes backup a standing commitment. The MSP is paid to make it working every month, not to install it once and disappear. If you’re thinking whether to hand that job to a provider, our comparison of managed IT support versus in-house IT lays out the tradeoffs.

Where Billing Models Quietly Create Gaps

 A laptop beside a server rack displays a restore verification checklist

Most MSPs price backup one of three  types: per device, per GB stored, or as a bundled tier with a storage allowance. Each has a failure mode.

Per-device pricing is easy to describe, but it can hide a client whose data has tripled on a single server. Per-GB pricing tracks usage honestly; the downside is bills that rises, which tempts clients to trim retention or drop older copies. Bundled tiers are assumable, yet some vendors set minimums such as a fixed number of endpoints, so a small client spend for protection it doesn’t use while another outgrows the allowance unnoticed.

The worst gap is administrative. A lapsed licence or a failed invoice can restrict a job without anyone noticing, and small organizations hardly have a second line of defense. The Sophos State of Ransomware 2026 report, which surveyed 2,158 organizations in 17 countries, found that only 34% of small organizations with 100 to 250 employees stopped attacks before their data was encrypted. Once encryption begins, the backup is the plan.

Billing Is Not Recovery: Test the Restore

A green status light on a dashboard proves a job ran. It doesn’t prove you can receive a working system back. That’s why the CISA #StopRansomware Guide directs organizations to keep offline, encrypted backups and to test restoration constanatly. It also warns that attackers go after backups directly, and that synced files can carry encryption into the cloud copy.

Recovery still pays off when it works. Sophos reports that 66% of organizations hit by encryption restored data from backups in 2026, up from 54% the year before, and 55% recovered within a week. Even so, the average recovery cost reached $1.7 million excluding any ransom, up from $1.53 million. Restoring is far better than paying, but it’s still costly when it’s slow or improvised.

Healthcare shows how strict this gets. Our guide to the 3-2-1 backup rule in healthcare explains why three copies, two media types and one offsite copy is important when records can’t go missing.

A Practical Checklist for Clients and MSPs

Put these items in the contract and the monthly review:

• Written recovery point and recovery time targets for each system, not one number for the whole company.
• A scheduled restore test at least every quarter, with the result delivered to the client.
• At least one immutable or offline copy, which CISA’s SafePay advisory AA26-293A recommends because attackers disable shadow copies and wipe network storage.
• Billing alerts that flag failed jobs, expiring licences and devices missing from the invoice.
• A clear upgrade path from basic backup to full disaster recovery as the client grows.
• Small gaps found early remain small, which is the same logic behind catching minor problems before they become downtime.

The Bottom Line

Pay for restores, not for storage. A backup subscription is worth its monthly fee only when the billing stays accurate, the copies stay out of an attacker’s reach, and someone has genuinely watched a restore finish. Ask for the test results; they tell you more than any dashboard.

---