I've done this before and I just email it to myself using the company email account. This way nothing leaves the workplace. Also, no financial transaction data

I've done this before and I just email it to myself using the company email account. This way nothing leaves the workplace. Also, no financial transaction data was in the db as it was a simple wordpress blog. If it stored credit card data or other important stuff I'd take a look at what PCI compliance says you have to do for your backups and follow that.