I would go a bit further than that. To me, not keeping archival backups for at least a few months seems grossly negligent. To a degree where they should be legally liable for the damages. They probably have some waivers for that in their terms… but they may not hold depending on the jurisdiction.