Acceptable, provided they are encrypted. I'm not in a flood zone myself, so floods have a very remote risk of occurring. Fire is always a possibility, albeit

Acceptable, provided they are encrypted. I'm not in a flood zone myself, so floods have a very remote risk of occurring. Fire is always a possibility, albeit also low on the risk scale. Depending upon your risk tolerance mitigating 'fire risk' could involve backup to a cloud service (#), or backing up to a portable disk that is swapped for another at a secondary location on some periodic basis. (#) the /necessity/ of needing 'off-site' for mitigating fire risk means one may have no choice but to utilize 'other people's disks' to obtain the 'off-site' aspect. You do have to make sure you can recover the encryption keys for the 'off-site' data in the event of the need to recover using the off-site data, so that adds some complexity to 'key management' (i.e., if all your copies of the keys go up in the fire, the off-site data may as well not exist).