Does the backup vendor have protection for its own environment, or is data backed up only at one site?