If You Think OneDrive or Dropbox Is Your Backup, You Are Taking a Serious Risk

Veeam has published a clear, practical explainer on the difference between file synchronisation and backup, and every small business owner in Sydney should read it, because the confusion between the two is one of the most common and costly mistakes we see.

What is the actual difference?

Sync tools (OneDrive, Dropbox, Google Drive and similar) are designed to keep your files consistent and accessible across your devices and your team. That is genuinely useful. The problem is that "consistent" cuts both ways. If a file gets deleted, corrupted, or encrypted by ransomware, sync does its job faithfully and replicates that damage everywhere the file lives. You end up with perfectly synchronised destruction.

Backup works differently. A backup takes a separate, protected copy of your data and stores it somewhere that ordinary day-to-day access cannot touch it. That separation is the whole point. When something goes wrong, you go back to that copy and restore from it.

Sync is about access. Backup is about recovery. They are not interchangeable.

Why do Sydney SMBs keep getting this wrong?

Because sync looks like backup. Files are stored in the cloud. Older versions are sometimes recoverable. It feels safe. But most sync services keep deleted files for only a limited window (often 30 to 180 days depending on your subscription tier), and that window can easily slip past unnoticed. A ransomware incident that quietly starts corrupting files weeks before it triggers can wipe out your entire recoverable history.

We also see businesses that have invested in good hardware or cloud storage and assume the job is done. Storage is not backup. Redundancy is not backup. You need a deliberate, separate, tested backup process, and most sync tools simply do not provide that.

What should a small business actually do?

First, audit what you have. If your "backup" is a sync folder, you have a gap and it needs to be addressed now, not at the point of an incident.

Second, follow the 3-2-1 principle: three copies of your data, on two different media types, with one copy offsite or air-gapped. This is not overcautious, it is the baseline.

Third, test your restores. A backup you have never restored from is a backup you cannot rely on. If your team has never actually pulled files back from your backup system, you do not know if it works.

The Veeam article goes into more detail on the technical distinctions and is worth reading directly at the source.

The bottom line

Sync tools are genuinely good at what they do. Use them. But do not mistake convenience for protection. For a small business in Sydney, a ransomware event or accidental mass deletion without a real backup is not just an IT problem, it can mean days of lost productivity, regulatory headaches, and in the worst cases, data that simply cannot be recovered.

If you are not sure whether your current setup gives you real backup coverage, the team at 4iT is happy to take a look and give you a straight answer. No obligation, just clarity.