How to Back Up an Online Business That Lives on Other People's Platforms

Published July 29, 2026

Part of: Choosing Your Tools — our full guide on this topic.

Disclosure: Some links below are affiliate links. If you sign up through them we may earn a commission at no extra cost to you. We only recommend tools we'd genuinely suggest to a friend. See our full disclosure.

Every guide on this site that mentions exporting your data assumes the same thing without ever saying it: that you can still log in.

Look at where the instruction actually appears. It shows up in migration guides and in the FAQ of nearly every tool comparison — yes, you can export your subscribers as a CSV and import them into the new tool. It is offered as reassurance. It is there to tell you that a decision is reversible, that you are not trapped, that leaving is possible.

That is a migration. You decided to go, you opened the account, you clicked Export. Every part of that sequence requires access.

The one moment you would genuinely need your data is the one moment you cannot get to it. An account suspended while you appeal. A card that expired quietly and a payment that failed while you were away. A login you cannot recover because the recovery address is an inbox you stopped using two years ago. A service that stops trading and gives you thirty days notice, most of which you spend not reading the email. In every one of those, the data is intact, safe, perfectly backed up — by them, for them — and completely out of your reach.

So this is the other article. Not how to export in order to leave. How to keep a copy while nothing is wrong, which is a different job with different priorities, and takes about an hour to set up properly.

The quick version

• A migration export and a backup are not the same act. One happens once, deliberately, with full access. The other happens repeatedly, while nothing is wrong, precisely because the moment you need it is the moment you cannot log in.
• Sort your business by one question: where is the only copy? Not “where is it” — where is the only one. Almost everything sorts itself instantly.
• The platform’s backups protect the platform from data loss. They do not protect you from lost access. Those are different problems.
• Some assets cannot be backed up at all — your handle, your rankings, reviews on someone else’s page, your followers as a reachable audience. Name them honestly instead of pretending a file covers them.
• A backup you have never opened is a belief, not a backup. Opening the file takes ten minutes.
• Do not schedule it. Attach it to something that already happens, like your bookkeeping.
• The cheapest and most useful backup is not a file — it is one page listing what lives where and under which email address.
• Backing up customer data creates an obligation. Keep the current export, delete the one it replaced.

The only question that sorts everything

You do not need a taxonomy of your business. You need one question, applied to each thing you own:

If this platform stopped letting me in tomorrow, where is the only remaining copy?

Ask that about ten things and the whole business sorts itself into three piles, and the piles need three completely different responses.

Pile one: you already have it. Course videos you filmed and edited. The PDF you designed. Product images. The article drafts you wrote somewhere before pasting them in. For these the platform holds a copy — the original is on your machine. This pile needs no work at all, only verification, because the assumption fails more often than you would like. The file was on the laptop you replaced. It was in a cloud folder you cleaned out. It was exported at low quality because that was the version you uploaded. Verify, do not assume — and verification here means opening the file, not seeing its name in a folder listing.

Pile two: it exists only because a platform recorded it. This is the pile that matters, and it is smaller than people fear:

• Your subscriber list, with the fields and tags you actually rely on — not just addresses.
• Your active subscriptions, if anything you sell recurs — the list of who is currently being billed, on what plan, and when their paid period ends. It is the one record you cannot reconstruct from anywhere else, and it is the first thing you need if you ever close a membership, because the closing date is calculated from it.
• Customer and order records: who bought what, when, for how much, and their email address. This is also your bookkeeping evidence, which makes it the one item with an obligation attached beyond your own convenience.
• Testimonials and reviews written on your product pages. People wrote these once and will not write them again, and if you have quoted them on a sales page you want the original wording and the name attached to it.
• The text of anything you published straight into the platform — pages, posts, product descriptions, the sales page you rewrote four times.
• The logic of any automation that runs without you. You cannot usually export a working sequence, but you can absolutely write down what it does, in what order, with what delays.
• Your list of published URLs, which is what tells you where the internet currently points at you.

Pile three: it cannot be backed up. Covered properly below, because pretending otherwise is the single most common mistake in this whole area.

Pile three: the things no export will save

An hour spent exporting is wasted if you finish it believing you are covered when you are not. These are genuinely uncopyable:

• Your handle — your name on that platform. There is no file version of it. If the account goes, the name may be taken by someone else, which is exactly the reason a parked profile is usually better than a deleted one.
• Account age and history. A five-year-old account and a new one holding identical data are not the same asset.
• Search rankings and the backlinks pointing at platform URLs. If people have linked to your page on someone else’s domain, that accumulated value belongs to the URL, not to you.
• Reviews sitting on someone else’s product listing. You can copy the text. You cannot move the social proof.
• Your followers as an audience you can reach. This is the important one and it is routinely fudged. Exporting a list of follower names is not the same as being able to put something in front of them. The reachability is the asset, and it does not export.

The correct response to an asset you cannot back up is not a better export. It is a second place where the same value exists.

Which is, finally, the honest reason so much advice — including this site’s, repeatedly — tells you to build an email list. Not because email is virtuous. Because the email list is the one audience asset where the reachability itself is portable: the addresses come with you, and so does the ability to actually send something. Every other audience you have is a permission granted by a company, revocable, and non-transferable. Treating your list as the backup of your audience is a strictly more useful framing than treating it as a marketing channel, and it is the same reason having somewhere you actually own keeps being worth the trouble.

Why the platform’s own backups are not your backup

This is worth stating plainly because it is the belief that stops most people from ever starting.

Your platforms almost certainly maintain excellent backups. Redundant storage, point-in-time recovery, the lot. And it is entirely irrelevant to your situation, because their backups solve their problem — a failed server, a bad deploy, a corrupted table — by restoring your account back into their system.

Your problem is not that their database might lose your rows. It is that you might lose the ability to reach them. Suspension, a failed payment, a recovery address you no longer control, a company winding down. In every one of those the data is perfectly safe and entirely inaccessible.

Their backup protects them from data loss. Yours protects you from lost access. Those are different failures with no overlap, which is why a well-run platform being well-run changes nothing about whether you need your own copy.

The account layer sitting above all of it

Before the exports, one thing that is upstream of everything and takes five minutes.

Nearly every platform in a solo business is recoverable through a single email account. That inbox is the master key. If it is also the thing you might lose — and it is the single most likely thing to be lost, because it is the account with the most ways in and the most ways to be locked out — then no amount of exporting helps, because you will be locked out of the exports too.

Two cheap things, and this article deliberately does not go further, because security advice that gets specific gets stale:

1. Know which email address each platform account is under, especially the older ones. This is more often unknown than people expect, and it is a five-minute answer today and an unanswerable one later.
2. Make sure your recovery method survives losing the device you use every day. If your second factor and your recovery codes both live only on your phone, you have one failure that takes out everything at once.

The specifics of how to store those safely are a security question, not a business one, and your platform’s own documentation is the right source rather than a general article — including this one.

What actually goes in the folder

Concretely, once, so it is done:

A subscriber export in CSV. Not just addresses — include the custom fields, tags and signup dates you actually use, because those are what your segments are built from and rebuilding them from memory is grim.

A customer and order export. Who bought what, when, at what price, and their contact address. Take it from whichever platform is the system of record for sales rather than from three places that half-overlap.

The source files for every product you sell, in the format you would need to edit it, not just the format you deliver. A flattened PDF is a delivery artifact. The editable original is the asset, and the difference only becomes visible the day you need to update the product and cannot.

A plain text file of anything you wrote directly into a platform. Copy and paste is fine. This is unglamorous and takes twenty minutes and is the item people skip, right up until they are trying to reconstruct a sales page from a screenshot.

A one-page written description of your automations — trigger, order, delays, what each email is for. Sequences rarely export in a form you can re-import anyway, so the useful artifact is the map, not the file.

A list of your published URLs. Where the internet currently points at you.

And the single most valuable page in the folder: what lives where. One plain document listing each platform, what it holds, which email address the account is under, and what would need to happen for the business to keep running without it. It is not a backup in the technical sense. It is better than one, because the realistic failure in a solo business is not a platform vanishing — it is you not remembering where things are, which is the same underlying problem as the accounts you forgot you opened. You cannot back up an account you have forgotten exists.

Check what is actually inside the file

A backup you have never opened is a belief, not a backup — and in a solo business the test is not a rehearsal or a drill, it is ten minutes with a file manager.

Open each export and check three things:

1. Does it contain the data or a reference to it? Some exports are a manifest of links rather than the things themselves, which works fine while the account is live and is worth precisely nothing afterwards. If a “course export” is a small file and your videos are large, you have a list, not a backup.
2. Are the columns you assumed actually there? The tags, the signup dates, the purchase amounts, the currency. Discovering the missing column now costs a minute; discovering it later costs the data.
3. Does it open? Encoding damage in a CSV — names with accents turning into rubbish — is quiet, common and survivable if you catch it while the source still exists.

That is the whole test. It is the difference between having a file and having a backup, and the fact that it is this cheap is the reason there is no excuse for skipping it.

Do not schedule it. Attach it.

Here is where most backup routines die: someone sets a monthly reminder, does it twice, and then starts dismissing the notification. A standalone recurring task with no external pressure behind it loses to everything else in the week, every week.

So do not create one. Attach each export to something that already happens.

• Customer and order records → your bookkeeping pass. You are already in that account, already looking at exactly those numbers, and the export is one extra click.
• Subscriber list → whenever you next do something substantial to your list, such as a clean-up or a segmentation change. You are in the tool with the export button on screen.
• Product source files → the moment you finish the file. This is the only time you are guaranteed to have it open, in the right version, knowing which one is final. Saving it to your own folder before you upload it is a one-second habit that makes pile one true rather than aspirational.
• The what-lives-where page → your annual subscription review. You are already enumerating every tool you pay for, which is 80% of the same list.
• Everything touched by a change → the change itself. Migrating a platform, replacing a format or retiring a tier is the one moment you are certain to be looking at the old version, and it is also the moment you are most tempted to delete it. Export before you switch, and keep the old thing intact until the change has been through a full cycle.

For most solo businesses, the resulting rhythm is roughly quarterly, which is genuinely enough. The gap you would lose is a quarter of new subscribers and a quarter of orders — recoverable, annoying, not fatal. Chasing weekly backups for a business with a handful of sales a week is effort spent for no reduction in real risk, and effort spent on theatre is effort that stops being spent at all.

Where it goes, and the trap in the obvious answer

Two copies, two places, and at least one of them not reachable from the same account as everything else.

That last clause is the whole point, and it is where careful people still get caught. Someone does everything right — exports diligently, files it neatly in cloud storage — and the cloud storage is attached to the same email address that every platform recovers through. One lost account, and the business and its backup go together. The backup was real; the isolation was not.

A folder on your own machine plus one cloud copy is enough, provided those are genuinely independent. Dated subfolders, obvious names. Do not over-engineer it: a plain structure you can find things in beats a clever system you abandon in two months, and this whole task earns its keep by being boring enough to actually repeat.

The part nobody mentions: your exports are a responsibility

A spreadsheet of customer names, email addresses and purchase history is personal data about other people. It does not stop being your responsibility because it moved from a platform to your laptop — arguably the opposite, because the platform had a security team and your downloads folder does not.

This is not an argument against making the backup. It is an argument for making it deliberately:

• Keep the current export, delete the one it replaced. Superseded copies are pure liability — no value, all exposure. They are also the copies everyone forgets when someone asks to be deleted: no “delete contact” button in any platform reaches a CSV in your downloads folder.
• Do not scatter them. One place, not five services and an email attachment you sent yourself.
• Store them somewhere access-controlled rather than on a shared or unlocked machine.
• If you stop selling something, the records still have a retention life for tax and accounting reasons. That is a reason to keep them properly, not indefinitely and everywhere. It is also the reason the export has to happen before you cancel anything, which is the step people reverse when closing a business down — the records live inside the very tools that get cancelled first to save money.

What the specific rules are where you and your customers live genuinely varies, and it is not something to take from a general article. Check the guidance for your own jurisdiction — the same discipline that applies to what you promise buyers and what your contracts say.

What this does and does not buy you

Worth being straight about, because the whole subject attracts fear-selling.

This does not make you platform-independent. If a platform you sell on disappears, you still have to rebuild the store, the checkout, the pages and the automations, and that is real work measured in days. Nothing in this article prevents that — what to actually do in that fortnight is a separate job, and the part of it that costs real money is not the rebuilding.

It does not protect your revenue during an outage. Your copy of the subscriber list does not send email. Restoring elsewhere takes as long as it takes.

What it buys is that nothing is permanently gone. It converts a catastrophe into an inconvenience — from my business no longer exists to my business is offline for a week and I am irritated. That is a smaller promise than the subject usually gets sold with, and it is the true one.

It also has a quiet second effect that shows up much sooner than any disaster. Businesses that know where their assets are move faster: they change tools without dread, retire a product cleanly, and raise a price knowing every place the old one is written. The confidence to change things is downstream of knowing what you have — which, for most people, is the return they actually collect on the hour this takes.

There is a cheaper cousin of this worth starting today alongside it: a dated log of what you change, not just an inventory of what you own. One line per edit — moved a page, updated the theme, deleted a batch of old posts, switched hosts. It costs nothing until the month your traffic falls and you need to know what you did five weeks ago, at which point it turns a two-week investigation into a two-minute one.

The one-hour pass, in order

1. List your platforms — every one holding something you would miss. Ten minutes, and the forgotten ones are the point.
2. For each, note which email address the account is under. Five minutes now, unanswerable later.
3. Ask “where is the only copy?” of each asset and sort it into the three piles.
4. Verify pile one by opening the files, not by seeing their names.
5. Export pile two — subscribers with fields, customers with orders, published text, the automation map, the URL list.
6. Open every export and check what is inside it.
7. Write the what-lives-where page. One page. It will be the most useful file in the folder.
8. Put it in two places, one of which is not reachable from your main account.
9. Attach each export to an existing habit rather than to a calendar reminder.
10. Delete the superseded copies.

Then go back to work. The whole point of this task is that it is boring, cheap, and done — and that the version of you who needs it will not be in a position to do it then.