Techniques to protect against data loss are disclosed. In various embodiments, an amount of data that has changed since a last backup of at least a defined subset of a save set is determined. The determined amount of changed data is compared to a corresponding threshold. A backup is performed based at least part on a determination that the determined amount of changed data equals or exceeds the threshold.