Share this
Multi-Location Clients Need a Different Backup Plan Than Single-Site Ones
by Josefine.Fouarge on Sep 23, 2026, 8:00:00 AM
When MSPs develop a backup strategy, they tend to follow a similar pattern:
- Figure out what's on the server
- Pick a schedule
- Set retention
- Done.
This works great when your customer has one office with one server. But what about businesses that operate across multiple physical locations?
Throughout the blog, we will use All Smiles Dental as an example. All Smiles Dental is a dental group that manages the IT for multiple dental offices. They have five practices spread across the region. Each practice was opened or acquired at a different time and has its own systems and IT history. In theory, they are one customer. In reality, however, the only things they have in common are a shared name and one invoice.
What actually changes once a business looks like that, and what does it mean for how you set up and manage their backups?
Table of Contents
- One Console, Not Five Logins
- Infrastructure Won't Match Across Sites
- Practice Management Software Fights the Backup Job
- Encryption Has to Be Consistent
- Naming Conventions
- Retention Isn't One-Size-Fits-All Across Sites
- Recovery Priorities Need to Be Decided Before an Incident Occurs
- Onboarding and Offboarding a Single Location Cleanly
- Alerts Need to Be Specific
- Billing Gets Harder to Track
- Frequently Asked Questions
- The Takeaway
One Console, Not Five Logins
Assuming you don't only check your customers' backups when an alert is sent via email — because that would be suboptimal, no matter how many clients your customer has — checking the backup status of a single-site client usually takes about five seconds. However, if the client has five locations, you either have to log into five separate systems or find them all in your dashboard (more on how to simplify that under naming conventions).
For All Smiles Dental, the MSP needs a single view showing all backup jobs, alert statuses, and encryption states. A setup that requires logging into each site's console separately is not scalable past two or three locations. This is the same problem discussed in our blog article, "What Managed Backup Actually Looks Like in Practice".
Infrastructure Won't Match Across Sites
Customers with multi-location businesses rarely have identical setups at every location, especially if some locations were acquired over time rather than set up by you from scratch. For example, one All Smiles Dental location might use Hyper-V for its practice management server, another might use a physical server, and a third might use a combination of the two plus a NAS that was added a few years ago.
That inconsistency must be planned for. This means that the backup policy must account for working on a VM in one location and a physical server in another, while ensuring that the RTO and RPO agreed upon with the customer align across all sites.
VM backup deserves its own line item because snapshot consistency and VM-aware backup require a different approach than physical file servers. Therefore, the backup plan requires different configurations for retention and the schedule at which backup jobs run, among other things.
Practice Management Software Fights the Backup Job
This one is specific to companies that rely on database-driven applications, such as dental and medical practices. For example, All Smiles Dental's practice management software (Eaglesoft, Dentrix, etc.) typically keeps its database open continuously. If a backup job doesn't handle open files correctly, it may report success every night. Yet, the database wouldn't start once recovered because fractions of the data are missing.
This is a known failure mode of databases. Open-file handling (VSS or an application-aware agent) must be verified in every location using this type of software. We also discussed this scenario in more detail in our blog post, "Why backups fail in SMB environments". The article also explains how a job can appear to run properly for weeks while missing a critical folder because the folder was moved, and the backup job does not include the new location.
Encryption Has to Be Consistent
For a HIPAA-regulated business like a dental group, encryption at rest and in transit isn't optional. The real question, though, is whether every site enforces the same standard and manages encryption keys as a process rather than handling them ad hoc by whoever is on site that week.
It's not unusual for an encryption passphrase to be sent via email or chat during a reset or tech handoff because it's the fastest way to unblock someone (although, we recommend not doing that). But if this is the only record you or your customer have, it becomes problematic once the person who sent it moves on to a different account or company.
Patient records are kept at every All Smiles Dental location. Therefore, the group's compliance posture must include documentation of who owns the encryption keys, as well as their rotation and handoff when staff or subcontracted technicians change.
Quick tip: If a passphrase was ever sent over email or chat, treat it as compromised. Rotate it and log the change as part of a documented key-ownership process, not an ad hoc fix.
Further reading
Demystifying HIPAA Compliance for Medical Practices and Dentists
A full breakdown of what HIPAA compliance actually requires beyond encryption alone.
Read the guideNaming Conventions
This may sound minor, but it can make backup management much easier.
For environments with one server per customer, a naming convention can be as simple as ClientName-Server. For clients with multiple sites, a different naming convention that also includes location information is needed. Having an agreed-upon, intuitive naming convention ensures that, for example, if oversight ever changes hands between technicians or MSPs, everyone will still know which backup job belongs to which customer.
Quick tip: A format like ClientName-LocationCode-Server (for example, AllSmiles-North-Server) keeps every job identifiable at a glance, even years later after staff turnover.
Retention Isn't One-Size-Fits-All Across Sites
Not every location generates the same volume or type of data. For example, one medical practice with in-house imaging generates far more data than a satellite office that mostly handles scheduling and billing. Applying one blanket retention policy to both would be wasteful at the small site and insufficient at the imaging-heavy site.
Our blog, "Creating a Backup Plan? Ask These Questions First," walks you through setting retention by data classification rather than by default settings. This logic applies per location, not just per customer.
Recovery Priorities Need to Be Decided Before an Incident Occurs
If a customer has only one server, it's easy to decide which server should be prioritized for recovery. Multiple servers across multiple locations, on the other hand, require you to decide in advance which location gets restored first.
All Smiles Dental customers may have considered what would happen if their locations went down simultaneously. Should the practice with imaging equipment get priority, or the one seeing the most patients that day? It's important to have that conversation with your customers ahead of time so that you know what to do immediately and don't have to wait to hear from them about which location to check on first.
Onboarding and Offboarding a Single Location Cleanly
Acquisitions, opening new locations, and closing locations all require defined processes for onboarding and offboarding, especially if resources are shared across locations.
This can get messy when multiple devices or sites point to the same cloud storage account to save on costs or simplify setup. Deleting an agent is straightforward. Untangling one site's data from a storage bucket that several other active sites still depend on? Not so much.
That's why All Smiles Dental has standard naming and retention procedures to quickly incorporate new locations into the same backup system. If a location ever closes, its backup data must be extracted cleanly without becoming tangled in a cloud account that is still in use by other sites. This is why they set up unique accounts for every machine in every office they back up.
Quick tip: Give every device its own storage account from day one, even if it costs a little more upfront. Untangling a shared account later costs far more in time.
Alerts Need to Be Specific
Instead of a generic email that simply says, "All Smiles Dental backup warning," the alert should specify which location failed, which goes back to the naming convention. When the alert specifies the location and system that ran into an issue, your technicians have an easier time fixing it.
Billing Gets Harder to Track
Per-location usage reporting is more important here than for a single-site client. Five locations generate five different data volumes, so the MSP might have to show what's being backed up and billed for at each site rather than presenting one invoice line for "All Smiles Dental" that no one can reconcile.
Additionally, when several clients have the same product that is renewing around the same time, an invoice or renewal notice that lists only the product name, not the client name or location, becomes difficult to reconcile. Usage-based reporting tied to the client and site by name avoids that entirely.
Frequently Asked Questions
FAQ
Does encrypting backups automatically satisfy HIPAA requirements for a multi-location dental or medical group?
No. Encryption at rest and in transit is one requirement among several. HIPAA also expects documented risk assessments, signed business associate agreements with every vendor that touches patient data, and a clear record of who holds the encryption keys and how access changes when staff turn over. A multi-location practice needs that documentation to cover every site individually, not just the main office. For a fuller breakdown, see our HIPAA compliance guide for medical practices and dentists.
FAQ
How much more does it cost to back up a multi-location business compared to a single site?
Cost typically scales with the number of devices and total data volume across all locations, not the number of sites itself. A five-location business with light data use at each site can cost less overall than a single site running high-volume imaging or video storage. Budgeting by device and data footprint per location, rather than a flat per-site rate, gives a more accurate picture before you commit to a plan.
FAQ
How long should it take to bring a newly acquired location onto the standard backup plan?
Most MSPs can fully onboard a new location within one to two weeks once naming conventions, retention settings, and storage destinations are already standardized across the rest of the business. The timeline stretches out when the acquired site's infrastructure differs significantly, such as unsupported software or hardware that needs replacing before a compatible backup agent can even be installed.
The Takeaway
A multi-location client isn't just a larger version of a single-site client. It's five (or however many) points of failure that require one point of visibility, one consistent policy, and a process to maintain consistency as the client grows or changes while considering the unique environment of each location.
If you're onboarding a multi-location client and want guidance on setting this up correctly from the start, talk to a NovaBACKUP expert. We can review your specific setup, site by site, before problems arise.
How NovaBACKUP can help
How Can NovaBACKUP Help?
NovaBACKUP manages local and cloud backups across every location from a single console, with consistent naming, retention, and encryption applied the same way at every site.
Worth Reading

Für Kunden mit standortübergreifenden IT-Umgebungen reicht ein Standard-Backup-Plan nicht aus

Antworten auf die 9 häufigsten Backup-Fragen von MSPs (2026 Update)
Share this
- Pre-Sales Questions (90)
- Tips and Tricks (86)
- Best Practices (38)
- Industry News (37)
- Reseller / MSP (36)
- Security Threats / Ransomware (26)
- Cloud Backup (23)
- Disaster Recovery (23)
- Compliance / HIPAA (21)
- Storage Technology (21)
- Applications (18)
- Backup Videos (15)
- Virtual Environments (12)
- Technology Updates / Releases (9)
- Data Protection Digest (8)
- Backup preparation (6)
- Infographics (5)
- Backup Software (4)
- Products (US) (4)
- Company (US) (1)
- Events (1)
- Events (US) (1)
- Unternehmen (1)
- September 2026 (2)
- August 2026 (3)
- July 2026 (4)
- June 2026 (2)
- May 2026 (3)
- April 2026 (7)
- March 2026 (3)
- February 2026 (2)
- January 2026 (2)
- December 2025 (2)
- November 2025 (1)
- October 2025 (2)
- September 2025 (1)
- August 2025 (1)
- July 2025 (1)
- June 2025 (2)
- May 2025 (2)
- April 2025 (2)
- March 2025 (1)
- February 2025 (2)
- January 2025 (2)
- December 2024 (1)
- November 2024 (2)
- September 2024 (2)
- August 2024 (1)
- July 2024 (2)
- June 2024 (2)
- May 2024 (1)
- April 2024 (2)
- March 2024 (3)
- February 2024 (2)
- January 2024 (1)
- December 2023 (1)
- November 2023 (1)
- October 2023 (1)
- September 2023 (1)
- August 2023 (1)
- July 2023 (1)
- May 2023 (1)
- March 2023 (3)
- February 2023 (1)
- January 2023 (1)
- December 2022 (1)
- November 2022 (2)
- October 2022 (2)
- September 2022 (1)
- July 2022 (1)
- June 2022 (1)
- April 2022 (1)
- March 2022 (2)
- February 2022 (1)
- January 2022 (1)
- December 2021 (1)
- September 2021 (1)
- August 2021 (1)
- July 2021 (1)
- June 2021 (1)
- May 2021 (1)
- April 2021 (1)
- March 2021 (1)
- February 2021 (1)
- January 2021 (1)
- December 2020 (1)
- November 2020 (1)
- October 2020 (1)
- September 2020 (3)
- August 2020 (2)
- July 2020 (1)
- June 2020 (1)
- May 2020 (1)
- April 2020 (1)
- March 2020 (2)
- February 2020 (2)
- January 2020 (2)
- December 2019 (1)
- November 2019 (1)
- October 2019 (1)
- August 2019 (1)
- July 2019 (1)
- June 2019 (1)
- April 2019 (1)
- January 2019 (1)
- August 2018 (3)
- July 2018 (2)
- June 2018 (2)
- April 2018 (2)
- March 2018 (1)
- February 2018 (1)
- January 2018 (2)
- December 2017 (1)
- September 2017 (1)
- May 2017 (2)
- April 2017 (4)
- March 2017 (4)
- February 2017 (1)
- January 2017 (1)
- December 2016 (1)
- October 2016 (2)
- August 2016 (3)
- July 2016 (1)
- June 2016 (2)
- May 2016 (6)
- April 2016 (5)
- February 2016 (1)
- January 2016 (7)
- December 2015 (6)
- November 2015 (2)
- October 2015 (5)
- September 2015 (1)
- July 2015 (1)
- June 2015 (2)
- May 2015 (1)
- April 2015 (3)
- March 2015 (3)
- February 2015 (3)
- October 2014 (2)
- September 2014 (5)
- August 2014 (4)
- July 2014 (4)
- June 2014 (3)
- May 2014 (2)
- April 2014 (3)
- March 2014 (4)
- February 2014 (5)
- January 2014 (4)
- December 2013 (4)
- October 2013 (6)
- September 2013 (1)
