Backing up your dental database is not enough: where the images actually live
A practice that "backs up everything" can still lose every x-ray. In several major platforms, images live in file folders outside the SQL database — here is how to check yours before you need it.
Most dental practice management systems keep their structured data — patients, appointments, ledgers, claims — in a SQL database. It feels natural to assume that "backing up the database" means backing up the practice. In several major platforms, it does not.
In systems including Dentrix and Eaglesoft, radiographs and photographs are stored as image files in separate folders on the server or a mounted share — alongside, but outside, the SQL database. A scheduled backup that targets only the database captures the ledger and the appointment book while quietly skipping every image the practice has ever captured.
The worst version of this failure is discovering it during a data restore — after a server failure, ransomware event, or a move to new hardware, when the database comes back complete and the images do not come back at all.
How to audit your own backup in ten minutes
- Ask your backup provider exactly what is included. Not "do we back up the server" — "does the backup include the image data directories, and can you prove it with a file listing?"
- Do a test restore of one x-ray. Not a database table — an actual image, opened and viewed. If your IT person cannot produce one, the backup is not covering images.
- Confirm retention. Image folders grow for decades; a backup job with a size cap can start silently failing years in.
- Check the cloud case too. If your vendor hosts everything, backups are their problem — but get their recovery-time and image-integrity commitments in writing.
Why this is a comparison dimension, not just an IT tip
Where images live changes the real cost and risk of a platform: self-hosted practices carry backup complexity that cloud customers outsource, and migration risk when switching vendors (image data is often the hardest part to move between systems). We factor storage architecture into our data export freedom scoring rationale on each product page, and the 21st Century Cures Act's information-blocking rules make vendor cooperation on data access a legal matter, not a courtesy — worth reading before you sign a contract, not after.
Put the numbers side by side in the software database, or read the pricing data methodology behind every figure on this site.