What we do
01  Advanced Infrastructure 02  Applied AI & Data 03  AI Cybersecurity 04  AI Assurance
Engagements
AI estate inventory Assurance review
Industries
Financial Services Government & Public Sector Energy & Utilities Telecommunications Healthcare & Life Sciences Transport & Logistics Industrial & Manufacturing Retail, Hospitality & Real Estate
Research
The Trust Maturity Model The GCC Assurance Index Readiness self-assessment Case studies Perspectives Sector briefings Technology evaluations
Company
About us Partners Events Careers Contact العربية Talk to our team
Advanced Infrastructure  ·  Storage & Resilience

Your backups exist. Have you tested one?

We do not sell you storage. We establish what you could actually recover, how far back, and how many of your copies would survive the same event — then we test it rather than accept the answer.

4–6 WEEKSRECOVERY POSITION & REMEDIATION PATHWE ASSESS · PARTNERS DELIVER
The decisions underneath

Three questions decide the design.

Storage is bought as capacity and a retention policy. It is held as three commitments that only get examined on the worst day of the year.

01

Where the data comes to rest

Every copy sits in a jurisdiction and under a legal regime. Can you name them for all of your copies, including the ones your SaaS vendors hold on your behalf?

02

What you could actually restore

You have a stated recovery point and recovery time. When was the last time either was proven by an attempted restore rather than by a successful backup job?

03

Who can reach the copies

If one credential can delete the primary, the snapshot and the backup catalogue, you do not have three copies. You have one copy and two conveniences.

Storage security

Eight copies. One event. How many are still standing?

Most estates hold something close to this and describe it as well backed up. Copies are not protection when they share a fate. Choose an event and watch the stack.

TIER 01 · SAME ARRAY
COPY 01

Production volume

The live data
COPY 02

Array snapshot

Same hardware, same admin plane
TIER 02 · SAME SITE
COPY 03

Synchronous replica

Second rack, same building
COPY 04

Backup appliance

On-premises, network-reachable
TIER 03 · SAME PLATFORM
COPY 05

Asynchronous replica

Recovery site, same admin plane
COPY 06

Cloud backup

Same tenant, same identity provider
TIER 04 · SEPARATE FATE
COPY 07

Object-lock vault

Immutable, separate credential domain
COPY 08

Offline copy

Removed media, manual custody
BLAST RADIUS— OF 8 SURVIVE
Select an event

Eight copies of the same dataset, arranged by what they share rather than by where they sit. Two copies in the same tier fail for the same reason — which is the part a copy count never tells you.

SURVIVESCONDITIONALLOST

We publish this because it is the first thing a review establishes and the last thing a capacity quote mentions. If your own stack survives every event on this list, you do not need us for a storage review — and we would rather you found that out here.

What you receive

A recovery position and a remediation path.

Four stages, every engagement, whether it runs four weeks or twelve. Hover a stage to see what happens in it.

DURATION
4–6 weeks
DELIVERABLE
Recovery position & remediation path
DELIVERED
Remotely; restore tests witnessed on site where required
INDICATIVE FEE
[FEE BAND — pending sign-off]
The boundary

We design it. We do not run it.

Three moves. Two of them are ours, and the one in the middle deliberately is not.

MOVE 01 — OURS

Assess and specify

We walk the estate, write the requirements the infrastructure has to meet, and sequence the path to get there. The requirement is written before any product is considered.

MOVE 02 — NOT OURS

You contract directly

You hold the contract with the provider or carrier. No margin passes through us, and no lock-in passes through us either. This is the move that makes the other two believable.

MOVE 03 — OURS

Re-test on a cycle

We return and check the estate against the same questions — including whether the thing you bought did what it was specified to do.

Because we carry nothing and resell nothing in this pillar, no recommendation we make depends on which platform you choose.
Advanced Infrastructure

The rest of this pillar.

Three engagements inside this pillar. Start with the question you can name, or take the whole estate at once.

Questions we are asked

Before you ask us.

Does Orvix provide storage, backup or vaulting services?
No. Orvix assesses and specifies the storage and resilience architecture; capacity, media, vaulting and cloud storage are delivered by a technology provider under their own contract and licensing, contracted directly with you. We do not hold your data, operate your backups, or take custody of media.
We test our backups every month. What would a review add?
A successful backup job proves the copy was written. It does not prove the copy is readable, that it is complete, that it can be restored inside the recovery time you have committed externally, or that it sits outside the credential domain an attacker would hold. Those are four different tests, and in most estates only the first is run on a schedule.
Is this a ransomware assessment?
No. Ransomware is one of the events we test the copy stack against, because it is the one that most reliably exposes shared fate — but the same review covers site loss, silent corruption, cloud tenant compromise, and provider exit. It is a recovery review, not a threat review.
How does residency come into a storage review?
Every copy rests in a jurisdiction, and a copy held for resilience is still a copy for regulatory purposes. A recovery design that quietly places a second copy outside the permitted region solves an availability problem by creating a compliance one. We record the jurisdiction of every copy as part of the count, before any recommendation is made.
What do I actually receive at the end?
A recovery position and a remediation path: the counted copy inventory with jurisdictions and credential domains, the result of an attempted restore against your stated recovery time, the copy stack tested against each event class, and a sequenced remediation path ordered by exposure rather than by cost. Four to six weeks, fixed fee, agreed at scoping.

Start with the event you could not survive.

Thirty minutes, no materials required. Run the eight-copy test against your own estate first — the event that empties the stack is the one worth talking about.

Book a 30-minute scoping call

ORVIX · INDEPENDENT AI & TECHNOLOGY ASSURANCE · WE DISCLOSE EVERY COMMERCIAL RELATIONSHIP ON THE PAGE FOR THE SERVICE IT BELONGS TO. WHERE LICENSING IS REQUIRED, DELIVERY IS PERFORMED BY NAMED PARTNERS UNDER THEIR OWN LICENCE.