most backup protocols advocated a secondary backup system off-site in case of earthquake , fire , or theft , but katherine and her brother agreed that secrecy was paramount ; once this data left the building to an off-site server , they could no longer be certain it would stay private .