Business recovery

Could you rebuild your business if it all disappeared tomorrow?

Your website, email, files, accounts and logins, mapped and checked so the answer is yes. A Recovery Audit shows you what you'd lose, who could get it back, and what to fix first.

Book a Recovery Audit Or call Stuart on 0478 780 076
Survival ScoreSample report: a five-person trade business

48%At risk

  • Domains and DNS38%
  • Website and hosting55%
  • Email67%
  • Documents and workspace43%
  • Accounting and finance86%
  • Payments and POS80%
  • Online presence30%
  • Branding and assets60%
  • Access and security25%
  • Recovery readiness0%

7 critical gaps9 unknowns to chase0 restores tested

A made-up example. Green is 80% and over, gold is 50% and over, red is under 50%. Your report covers all 12 areas.

It's rarely a fire. It's usually a login.

For most small businesses, the bad week doesn't start with a flood. It starts with an account you can't get into, owned by someone you can't reach.

  • The old developer owns your domain

    Your web address was registered on their account. They've moved on, the card on file expires, and one morning your website and your email both stop.

    The audit checks who your domain is registered to, whose account it's in, and that it renews and is locked.

  • Google or Microsoft locks you out

    An automatic security flag suspends the account your email, files and calendar live in. Getting it back can take days of support tickets.

    The audit checks for a second admin, up-to-date recovery details, and a copy of your files kept somewhere else.

  • You lose your phone, and your login codes

    The two-step codes for your bank, email and accounting all live on one phone. It's at the bottom of a lake, and so is your way in.

    The audit checks that your backup codes are stored safely in your own password manager, not just on the phone.

  • Someone clicks the wrong link

    A fake sign-in page takes an admin password, and whoever's behind it changes the recovery email before you notice.

    The audit checks two-step login on every key account, who has admin, and how you'd take it back.

  • The site breaks, and the backup was on the same server

    Your host has a problem, or the site gets hacked, and the only copy of your website was kept by the same company, behind the same login.

    The audit checks for backups kept with a different provider, and whether one has ever been restored.

  • A staff member leaves with the keys

    The Facebook page, Google listing or ad account was set up on their personal login. They're gone, and so is your access.

    The audit checks that every account belongs to the business, with at least two people who can get in.

Backed up isn't the same as recoverable.

Plenty of businesses have a backup somewhere. Far fewer have ever tried putting one back. Your report marks each system at one of three levels, and only the last one counts as safe.

  1. Level 1

    Archived

    A copy exists somewhere. Better than nothing, but a copy isn't a working business.

    For exampleA zip of the website from last year, or an accounting export on someone's laptop.

  2. Level 2

    Restorable

    There's a known way to put it back, someone who can do it, and access they can actually use. Some apps export everything but only take part of it back, so I note what would need rebuilding by hand.

    For exampleWebsite backups kept with a separate provider, under logins your business controls.

  3. Level 3

    Tested

    It has been put back, recently, and checked. Not "should work". Has worked.

    For exampleYour website restored into a temporary copy this month, with every page checked against the live site.

Everything your business runs on, in one map.

Twelve areas, about 70 checks, sized to your business. If something doesn't apply to you, it's left out of your score.

  • Domains and DNSWho owns your web address, when it renews, and whether it's locked.
  • Website and hostingThe hosting account, off-site backups and when one was last restored.
  • EmailWho controls it, how many admins, and protection against fakes sent in your name.
  • Documents and workspaceGoogle Workspace or Microsoft 365, shared files, and your key documents.
  • Accounting and financeWho owns the Xero or MYOB subscription, exports, and your accountant's access.
  • Payments, POS and online storeSquare, Stripe, Shopify and the rest, and where your payouts go.
  • Online presenceYour Google listing, social accounts and ad accounts, and who can log in.
  • Branding and assetsLogo files, photos, templates and trademarks, and where the originals live.
  • Software and licencesEvery app you pay for, when it renews, and whether you can get your data out.
  • Access and securityPassword manager, two-step login, and recovery codes that aren't only on one phone.
  • People and continuityWho can step in if you can't, and what happens when someone leaves.
  • Recovery readinessThe map, the order to restore things in, and proof it works.

About two hours of your time, all up.

No tech knowledge needed. You stay in control of every account the whole way through.

  1. A look from outside

    Before we talk, I check what's public: who your domain is with and when it renews, where your email and website are hosted, your Google listing and socials.

    Nothing needed from you

  2. A short form

    Simple questions about the tools you use. "Not sure" is a perfectly good answer: finding those gaps is the point.

    10 to 15 minutes · never passwords

  3. A screen-share session

    On a video call, you log in to each account yourself while I watch and take notes. I never type your passwords or keep them.

    60 to 90 minutes

  4. Your report

    We go through it together: what's solid, what's at risk, and what to fix first. Anything still unknown, I chase with you.

    Yours to keep

A clear picture, and a short list of what to fix.

  • Your Recovery Map

    Every account the business depends on: who owns it, who can log in, how to get back in, where it's backed up and when it renews. Never the passwords themselves.

  • Your Survival Score

    One number, plus a score for each of the 12 areas, so you can see where you stand today and watch it improve.

  • Your fix list

    Every gap explained, in order: fix now, fix this month, fix later. Most are quick once someone knows they're needed.

Then we make it true, and keep it true.

The audit stands on its own. If you'd like help with what it finds, there are three ways to carry on.

  • Once

    Fix the gaps

    The fixes from your report, done for you on a fixed quote. Or take the list and do them yourself.

    • Domains moved into an account you own, with auto-renew and a lock
    • Website backups kept with a separate provider that can't be overwritten
    • Backups set up for Google Workspace, Microsoft 365 or your online store, using proven tools, in your name
    • Two-step login and backup codes sorted
  • Every month

    Monthly checks

    Someone actually checking that it all still works, not just that a backup ran.

    • Your website backup restored into a temporary copy and checked
    • Domain renewals, locks and security certificates watched
    • Admin access and old accounts reviewed
    • A one-page report each month, and your score updated every quarter
  • If the worst happens

    Recovery on call

    A written plan for your business, and the person who wrote it ready to use it.

    • A runbook: what to restore, in what order, and who to call
    • Kept up to date as your business changes
    • If disaster hits, I do the rebuild with you

Priced to the size of your business. You get a fixed price in writing before anything starts, and monthly checks are only quoted after the audit, once we both know what's there.

You keep the keys. Always.

  1. You own every account.Everything stays in your business's name. Where I need to look deeper, you add me as an extra admin, and you can remove me any time.
  2. I never hold your passwords.Not in a form, not by email, not by text. If one is ever sent to me by mistake, I delete it and ask you to change it.
  3. Secrets live in your password manager.Logins and backup codes go in your own password manager, like Bitwarden or 1Password. Your Recovery Map only says where they are.
  4. Tested means tested.Nothing gets marked safe until it's been restored and checked. If I couldn't confirm something, your report says so.
Stuart, founder of Human Web Co, wearing glasses and a black t-shirt

The hard part is rarely the rebuild.

Building websites for local businesses, I keep running into the same thing: nobody's sure who owns the domain, who can log in to the Google listing, or where the last developer went.

Sorting that out before something goes wrong takes an afternoon. Sorting it out after can take weeks of lost trade. I'd rather you only ever need the first one. You'll deal with me the whole way through.

Stuart, Human Web Co

What people ask about it.

Do you need my passwords?

No, and I'll never ask for them. In the session you log in yourself while sharing your screen. For deeper checks, you add me as an extra admin on the account, which you can remove at any time.

Is this a backup service?

Not on its own. It sits on top of the tools you already have. The audit finds out what's backed up and whether it can actually be put back. Where there's a gap, I set up a proven backup tool in your business's name, so the backups belong to you.

Do I need to be technical?

Not at all. The questions are simple, "not sure" is a fine answer, and your report explains every gap and fix without jargon.

What does it cost?

It depends on the size of the business and how many systems it runs on. You get a fixed price in writing before anything starts, and monthly checks are optional.

I'm not one of your website clients. Can I still have an audit?

Yes. It doesn't matter who built your website or what it runs on. The audit covers the whole business, not just the site.

Can you promise I'll never lose anything?

No one honestly can. What I can do is find the gaps, close them, prove your backups restore, and have a written plan ready, so a bad day stays a bad day and doesn't become a bad month.

What happens to the information you collect?

Your Recovery Map records who owns what and how to get back in, never the passwords themselves. It's kept securely, only used for your audit and checks, and handed back or deleted when we stop working together. The details are in my privacy policy and terms.

Book a Recovery Audit.

Tell me a little about the business. I'll reply personally with a time for a short call and a fixed price for your audit.

Request an audit

Please don't include any passwords. Your details are only used to reply. See the privacy policy. Spam protection by Cloudflare.