A second site, planned, built and tested with you.
For systems on our platform, on AWS, Azure or Google Cloud, on VMware or in your own datacenter: the latest copy of the virtual machines you choose, ready to start in our datacenter in Madrid, Munich, Helsinki or Amsterdam. Backups there that can be locked, your own addresses announced from two of our sites, and a written runbook we keep current and test with you.
Free, 60 minutes
Written diagnosis in a week
An engineer on the call
One plan, system by system.
An example: where each system runs, where its copy waits, how the copy is kept, and who decides to fail over.
| System | Runs today | Its copy waits | How the copy is kept | Who decides |
|---|---|---|---|---|
| Online shop | Our Cloud, Madrid | Ready to start in Munich, on capacity set aside | The latest copy, refreshed on the schedule you agree | Automatic, as your contract sets |
| Customer database | Our managed PostgreSQL, Madrid | A replica in Munich, ready to take over | Asynchronous replication | You |
| Booking system | Virtual machines on AWS | Ready to start in Amsterdam | The latest copy, refreshed on the schedule you agree, over direct peering | You |
| ERP | VMware, in your datacenter | Ready to start in Amsterdam | Our own process clones it, extracts its data and imports it on the schedule you agree, over Private Link | You |
| File server | A dedicated server, Madrid | No ready copy: backups in Munich, locked | Backed up as part of this setup | You |
An example recovery plan
Online shop
- Runs today
- Our Cloud, Madrid
- Its copy waits
- Ready to start in Munich, on capacity set aside
- How the copy is kept
- The latest copy, refreshed on the schedule you agree
- Who decides
- Automatic, as your contract sets
Customer database
- Runs today
- Our managed PostgreSQL, Madrid
- Its copy waits
- A replica in Munich, ready to take over
- How the copy is kept
- Asynchronous replication
- Who decides
- You
Booking system
- Runs today
- Virtual machines on AWS
- Its copy waits
- Ready to start in Amsterdam
- How the copy is kept
- The latest copy, refreshed on the schedule you agree, over direct peering
- Who decides
- You
ERP
- Runs today
- VMware, in your datacenter
- Its copy waits
- Ready to start in Amsterdam
- How the copy is kept
- Our own process clones it, extracts its data and imports it on the schedule you agree, over Private Link
- Who decides
- You
File server
- Runs today
- A dedicated server, Madrid
- Its copy waits
- No ready copy: backups in Munich, locked
- How the copy is kept
- Backed up as part of this setup
- Who decides
- You
Each system's objectives are agreed with you and written into your contract. We do not publish them, because yours are not anyone else's.
How the plan is made
01 Business impact analysis
Which systems matter most, what an outage costs you, and what each one depends on.
02 Objectives for each system
How much data each can afford to lose (RPO) and how long it can be down (RTO), agreed with you, then designed to.
03 A written runbook
Who decides to fail over, the order your systems come back in, and how you check that they work.
Your continuity plan and its objectives stay yours, and so does answering to your regulators. We design the setup, build it, maintain it and test it, as far as your contract allows.
Writing your recovery plan with you is part of the engagement, and it starts with the discovery call. Request it
What we build, and what we watch.
The copies, the backups and the network behind the plan, starting from where your systems run today.
Where you run today
- Our Cloud or Bare MetalCopies and backups wait in another of our sites, in another country.
- AWS, Azure or Google CloudYour recovery site with us, a second provider, reached over direct peering.
- VMwareOur own process clones each machine you choose, extracts its data and imports it here, on the schedule you agree.
- Your own datacenterYours as the main site and ours for recovery, or the reverse, connected only over Private Link: our router, our fibre, or a tunnel over your own connection.
The copies
The latest copy of the virtual machines you choose, ready to start in our datacenter in the site you pick, and refreshed on the schedule you agree, with our own tooling or the tools you already use.
- Managed databases with a replica in a second site, ready to take over
- Capacity set aside in the second site, if your contract includes it
Backups
A copy of your backups in a second datacenter, off your production network.
- Locked for a period you set, so they cannot be changed or deleted before it ends
- Dedicated servers, backed up as part of this setup
- A restore from before a problem, as far back as your agreed schedule keeps them
The network
Your own addresses, announced from two of our sites, so your services keep their addresses after a failover.
- From our AS, over BGP with yours, or both
- No AS or address space of your own yet? We help you apply for them
- Health-checked DNS that sends new lookups to whichever site is up
What we watch
We watch replication and tell you when a copy falls behind, we keep the runbook current as your systems change, and we run the recovery tests with you.
A copy isn't a recovery. A tested one is.
What you get after each recovery test, run with you on a schedule you choose.
- Systems
- The online shop, the customer database and the ERP
- Where they came back
- The recovery sites in the plan, while production kept running
- Taking part
- Your team and ours
- Run from
- The runbook, on your decision
| System | What the test did | Result | What changed |
|---|---|---|---|
| Online shop | Started it from its latest copy | Came up, and your team checked the checkout | Nothing |
| Customer database | Promoted the replica | Came up, but one report still pointed at the old primary | Pointing reports at the new primary is now a step in the runbook |
| ERP | Started it from its latest copy | Started, but could not reach its licence server | The licence server is now in the plan, with a copy of its own |
Online shop
- What the test did
- Started it from its latest copy
- Result
- Came up, and your team checked the checkout
- What changed
- Nothing
Customer database
- What the test did
- Promoted the replica
- Result
- Came up, but one report still pointed at the old primary
- What changed
- Pointing reports at the new primary is now a step in the runbook
ERP
- What the test did
- Started it from its latest copy
- Result
- Started, but could not reach its licence server
- What changed
- The licence server is now in the plan, with a copy of its own
Your own report also records how long each system took to come back. This example leaves the times out.
Evidence for your auditor or regulator
Which country each copy we keep is in, when we last tested it, and what the test showed.
Your own continuity tests
When you run your own continuity tests, we take part in them.
Who answers for it
Your management owns your continuity plan and answers to your regulators. Our reports are evidence you can use.
The recovery tests are part of maintaining the setup.
Start with what you run today.
Tell us what runs where. Existing customers use the same form.
Free, 60 minutes
Written diagnosis in a week
An engineer on the call
Three ways to a second site, compared.
What each asks of you, and whose law applies.
Criterion
Your cloud's other region
Your own second datacenter
DIVERSITY
Who plans it
You, with their tools
Your own team
We do, with you
Recovery tests
Yours to run
Yours to run
Run with you, in writing
Where copies wait
Their region, same provider
A building you run
Our EU site, your choice
Managed services
Many copy across natively
You run them yourself
VMs and our own databases
If the provider fails
Both regions can go
You are the provider
Both, only if both are ours
Your own addresses
Can be brought, with limits
Yours to announce
From two of our sites
Foreign legal orders
US law, if a US provider
Depends on who owns you
Your copies: none above us
Who plans it
- Your cloud's other region
- You, with their tools
- Your own second datacenter
- Your own team
- DIVERSITY
- We do, with you
Recovery tests
- Your cloud's other region
- Yours to run
- Your own second datacenter
- Yours to run
- DIVERSITY
- Run with you, in writing
Where copies wait
- Your cloud's other region
- Their region, same provider
- Your own second datacenter
- A building you run
- DIVERSITY
- Our EU site, your choice
Managed services
- Your cloud's other region
- Many copy across natively
- Your own second datacenter
- You run them yourself
- DIVERSITY
- VMs and our own databases
If the provider fails
- Your cloud's other region
- Both regions can go
- Your own second datacenter
- You are the provider
- DIVERSITY
- Both, only if both are ours
Your own addresses
- Your cloud's other region
- Can be brought, with limits
- Your own second datacenter
- Yours to announce
- DIVERSITY
- From two of our sites
Foreign legal orders
- Your cloud's other region
- US law, if a US provider
- Your own second datacenter
- Depends on who owns you
- DIVERSITY
- Your copies: none above us
Procurement or audit questions of your own? Bring them to the discovery call. Request it
What they say about our work
“Our shop runs on a US cloud. The virtual machines behind it now have a recovery site with a European provider, in a country we can name.”
CTO
Online retailer, Spain
1 of 6
Things people ask before signing
What we get asked, with honest answers.
If both sites are yours, what happens if you fail?
Then both go together: a second site of ours protects you against losing a site, not against losing us. If that is the risk you are planning for, keep your main systems where they are, on AWS, Azure, Google Cloud or in your own datacenter, and recover to us. Or run with us and keep your recovery site in your own datacenter, over Private Link. Either way, addresses of your own stay yours, and we can announce them with your own AS.
What is kept in the second site?
The latest copy of the virtual machines you choose, ready to start, refreshed on the schedule you agree. Alongside it, as your plan sets: a replica of your managed databases, ready to take over; a copy of your backups, which can be locked; and capacity set aside, if your contract includes it. The ready copy is the latest one; your backups reach back as far as their schedule keeps them. The plan decides which systems get a ready copy and which rely on backups.
We run VMware. How do our machines get there?
Through a process of our own. On the schedule you agree, it clones each machine you choose, extracts its data and imports it into our datacenter, so the latest copy is ready to start there. Your VMware estate stays where it is; if it runs in your own datacenter, it reaches ours over Private Link.
Can our systems on AWS, Azure or Google Cloud recover to you?
Yes, and that makes it a second provider rather than a second region: another region of the same provider is still the same company, under the same contract and the same law. The copies are made with our own tooling or with the tools you already use, on the schedule you agree. We peer directly with AWS, Azure and Google Cloud at European exchange points, so your copies take a short, known path to us instead of a transit provider's. A service that only your provider runs has no copy to start here: the plan names those systems.
Can our own datacenter be part of it?
Yes, in either direction: your datacenter as the main site and ours for recovery, or the reverse, depending on where most of your systems run. It connects to ours only over Private Link: through our router, over our fibre, or through a tunnel over your own connection.
How does BGP multihoming work with you?
Your own addresses, announced from two of our sites, so your services keep their addresses after a failover. We can announce them from our AS, run BGP with your own AS, or both. With your own AS, you can also announce them through another provider alongside us. If you have no AS number or address space yet, we help you apply for them. Routes take time to settle after a change, so it is not instant. For services without addresses of their own, health-checked DNS answers with whichever site is up; that is not instant either, because users move over as the answers their resolvers have cached expire.
Are dedicated servers and managed databases covered?
Yes, within this setup. An unmanaged dedicated server has no backup of its own, and no dedicated server has failover underneath it; this setup adds backups of it in a second site, as your plan sets. Our managed databases do not fail over between sites on their own: a replica in a second site is something this setup adds.
Is failover automatic?
It can be, or it can wait for your decision: the design and your contract set which, system by system, and the runbook names who decides. Who then carries out the steps, our engineers or your team, is set in your contract too.
What does maintaining the setup cover?
Three things: we watch replication and tell you when a copy falls behind, we keep the runbook current as your systems change, and we run the recovery tests with you.
What happens after a ransomware attack?
We restore from a backup taken before the attack, if your backups reach back that far, into an isolated network first. We check it with you, and only then bring it back. Responding to the attack itself belongs to our SecOps service.
How often do we test?
On a schedule you choose. Your production keeps running in the main site while we start the copies in the second site, check them with you and shut them down. Each test is run from the runbook and ends in a written report of what came back and what changed.
How is it bought?
As one setup designed for you. The contract names the systems, their objectives, where each copy waits, who decides to fail over and who carries it out, and the recovery tests, on a schedule you choose. We do not publish prices.
Is capacity kept for us at the second site?
Yes, if your contract includes it: capacity set aside for you in the second site.
How do we start?
With the discovery call, and it is free: 60 minutes, an engineer rather than a salesperson, and a written diagnosis inside a week. It is a conversation, not a plan, a test or a design. Already a customer? Same call, same form.
Does DORA or NIS2 require a European recovery site?
No. Neither requires your data, or your recovery site, to be in the EU. Both make you answer for your continuity and for your providers, and your contract's DORA addendum gives you and your supervisor the audit, access and inspection rights that come with that. European supervisors now publish a list of the critical ICT providers the financial sector leans on hardest, and the large hyperscalers are on it. We are not, so a recovery site with us does not add to that concentration.
Where do the copies sit?
The copies we keep sit in our datacenters, in the site you choose: Madrid, Munich, Helsinki or Amsterdam, all four in the EU. Your evidence says which country each one is in. If your own datacenter is the recovery site, or copies are kept anywhere else, by your own tools or another provider, those copies are outside that answer.
Can an order from outside the EU make you hand our copies over?
For the copies we keep: DIVERSITY is a European company with no parent company, US or otherwise, so there is no entity above us for an order from outside the EU to be served on. That is a structural answer rather than a policy one.
You might also want
Datacenters to compare the four sites your copy can wait in, Colocation for your own hardware in a second site, and IT Consulting for a review, or a move for good.
Shall we talk?
A free 60-minute call, and a written diagnosis inside a week.
Write or call and you'll get an engineer, not a ticket bot.
