Offsite works fine, but for many people offsite is still accessible by current credentials.

The S3 options around this work well with object lock or similar.

I remember the old school tape methods (we had a rotation of who took the tape home). This was truly offline