What is the difference between a vital records program and an IT backup, and why isn't a backup enough?

A vital records program and an IT backup both protect information, but they answer different questions. A backup asks, “Can we restore our systems?” A vital records program asks, “Which records does the organization absolutely need to keep operating, meet legal obligations, and protect people’s rights — and how do we guarantee they survive a disaster?” The two overlap, but they are not the same, and one cannot substitute for the other.

What a vital records program is

Vital records are the small subset of records an organization cannot function without. They typically fall into two groups:

• Emergency operating records needed to resume or continue business immediately after a disruption (delegations of authority, contracts, system documentation).
• Rights-and-interests records that protect the legal and financial standing of the organization and the people it serves (titles, payroll and benefits data, accreditation, case files).

A vital records program identifies these records, ranks them by criticality, and applies deliberate protection — duplication, dispersal to a safe location, and tested recovery procedures — as part of broader continuity planning.

Why a backup is not enough

An IT backup is a technical copy of data made to recover systems after failure. It is necessary, but it has blind spots a vital records program is designed to close:

• No prioritization. A backup treats all data alike. It does not tell you which records are vital, or which to recover first when time and resources are scarce.
• Not all records are in IT systems. Paper, signed originals, and records held by third parties may never reach a backup at all.
• Authenticity and context. Records must remain trustworthy, complete, and usable as evidence over time. A raw data restore can lose the metadata, structure, and chain of custody that make a record reliable.
• Retention and disposition. Backups are about recovery, not lifecycle. They do not enforce how long records must be kept or when they may be destroyed.
• Untested recovery. Backups often go unverified; a vital records program requires that critical records can actually be retrieved and used.

In short, a backup helps you rebuild a system. A vital records program ensures the right information survives in a trustworthy, usable form. Sound recordkeeping treats them as complementary parts of one continuity strategy.

Learn more at the archives and preservation hub.