Keepit has published the Keepit Annual Data Report 2026 which looks at how SaaS recovery readiness is evolving. Based on real-world backup and restore activity, the report says that recovery practices remain a work in progress for many, especially smaller, organizations – while larger enterprises increasingly demonstrate greater operational maturity through active recovery practices.
The report analyses aggregated and anonymized behavioural data from Keepit’s production backup environment, examining how organizations actually engage with their backups.
Key findings include:
- Nine in ten enterprises have validated bulk recovery, demonstrating a maturity in their disaster recovery preparedness.
- Identity systems are tested four times less often than productivity systems, even though losing identity access can prevent access to all other SaaS applications.
- 90% of restores are single-file downloads, indicating that simple data loss incidents are most common and that IT administrators appreciate the ability to do granular, immediate recovery.
- High-profile global outages – including major cloud and security incidents – did not lead to increased recovery testing, suggesting that even visible disruptions rarely prompt validation of recovery readiness.
A behavioural signal and a clear path forward
One of the clearest insights in the report is behavioural. Everyday restores show how organizations build confidence and recovery capability over time. Single-file restores are familiar and useful, but they represent an early stage of readiness – not full validation for large-scale incidents.
The report shows that resilience is built through practice, not additional tools. Organizations that make recovery a routine, repeatable process – supported by structured testing and guided recovery – are better prepared to restore the right data, in the right order, at the right scale.
