The databases are first backed up to the SQL server then we take a copy of that and move it to our file server. These servers are kept in locked cabinets in our secured data center. The backups are done every 24 hours only if there has been a change to the database. The only people that have access to them are Administrators and Technicians on our staff.