Your Cloud Folder Says It Is Synced. Here Is What a Real Restore Test Found

Technology, July 28, 2026: The call came in on the first Monday of October, which is roughly when this sort of call always comes in. Hurricane season was winding down, the Odums had spent September watching a storm track and moving nothing, and Dana Odum had just started pulling client files for the fourth-quarter bookkeeping work she does from a converted bedroom in their Mobile, Alabama house. A folder of 2023 client records opened empty. The sync icon in her taskbar was green, had been green for months, and the consultant she called that morning told her on the phone that the green icon was the reason she had a problem rather than the reason she did not.

The green checkmark that was not a backup

Sync and backup solve different problems, and the difference only shows up on the day you need it. Sync keeps two copies identical, which means that when a folder is deleted, corrupted, or encrypted on the laptop, the service faithfully makes the remote copy match. Dana's consumer plan held prior versions of individual files for a limited window, but that window had closed sometime in the summer, and version history is organized around single files rather than a folder someone dragged into the wrong place. Nobody had done anything careless. An external drive had been disconnected mid-copy in June, a folder had been reorganized around it, and the change had propagated exactly as designed.

The consultant's first visit was not a repair visit. He spent it doing the thing the household had never done, which is to pick three items at random and attempt to put them back on a machine that had never held them. That is a restore test, and it is the only evidence that a backup exists. A completed job log is a record of what the software believes it did. The National Institute of Standards and Technology is responsible for the federal guidance that data recovery practices are built on, and the recurring theme of that guidance is verification rather than configuration. Setting a schedule is the easy half.

What the test actually turned up

Three findings came out of that afternoon, and only one of them was the missing folder. The second was that the external drive in the closet, the one Marcus Odum rotated on no particular schedule, had stopped completing its job in February and had been reporting a partial success ever since, because the software counted skipped files as skipped rather than failed. The third was the one that changed the bill. Dana's working files included client names, addresses, Social Security numbers, and bank account details, and none of the copies, local or remote, were encrypted at rest. The data was fine. The exposure surface was larger than anyone had pictured.

That reframed the job from recovery to remediation. Recovering the 2023 folder took a paid extraction from an older drive image and about a day of waiting. Rebuilding the arrangement took longer, because the consultant would not put client data back into the same structure it had come out of. What went in instead was an encrypted local copy on a drive that stays in the house, an encrypted off-site copy with a provider that keeps immutable versions for a fixed retention period, and a written restore procedure that Marcus could follow without calling anyone. Three copies, two formats, one of them off the property.

Two states, two different letters

Here is where the Odums' address mattered more than their equipment. Dana's client list runs across the state line into Mississippi and up into Tennessee, and breach notification is governed by the law of the state where each affected person lives, not the state where the bookkeeper sits. Those laws are not uniform. Some set an outer deadline counted in a fixed number of days from discovery, others require notice without unreasonable delay and leave the outer bound to argument, and several require a parallel notice to the state attorney general once the number of affected residents crosses a threshold that differs from state to state. A single incident in one spare bedroom can generate three different clocks.

The part that saved the Odums real money is the provision most states share in some form, which is that notification duties attach to unencrypted personal information. If the data that leaves your control is encrypted and the key did not leave with it, many state statutes treat the event as something other than a reportable breach. Nothing had left the house in this case, so no letters went out. But the consultant made the point plainly while he was configuring the new drives: the encryption he was turning on that afternoon was not an abstraction about privacy, it was the difference between a quiet repair and a mailing to clients in three states with an attorney reviewing the wording.

Local rules layered on top of that. Coastal Alabama sits in a flood zone where the off-site copy cannot reasonably be another drive in the same garage, and the household's insurer had its own expectations about records after a loss. Dana also keeps the seven-year retention window her professional obligations imply for client work papers, which is longer than the retention her original consumer plan offered by a wide margin. Retention length, encryption status, and off-site distance were all being set by somebody other than the Odums. They just had not read who.

The schedule they left with

The final invoice arrived in the second week of November with four line items. Hardware was the smallest of them, two drives and an enclosure. The off-site service was an annual subscription, quoted per year rather than per month, which the consultant recommended because the annual term matched the retention term and avoided a lapse nobody would notice. The two labor lines, diagnostic and rebuild, together made up most of the total, and the rebuild line was larger than the diagnostic one. Dana's accountant treated the business share as a deductible expense against her Schedule C income, which recovered a portion of it at her marginal rate.

The schedule was the cheapest part and the part most households skip. Four restore tests a year, pinned to dates that already exist: early January when the tax documents start arriving, early April after the return goes out, early July, and the first week of October before storm season closes and the fourth-quarter files come in. Each test is one file, one folder, and one full client directory, restored to a machine that did not create them, timed with a phone. Marcus writes the date and the elapsed time on an index card taped inside the closet door.

The Odums lost nothing in the end, which is the useful part of the story rather than the dull part. What they bought for the price of one autumn afternoon and a November invoice was the knowledge that the copy exists, which they had believed for two years on the strength of a green icon, and a set of four dates that will tell them within an hour if it ever stops being true.