Multiple storages. One in startup, second on Dropbox, one local, another one in AWS Glacier. This way startup failure does not affect users.