How should a small SaaS team design a basic backup routine?

Question

A team I support stores customer and operational data in a managed database, but they have never tested restoring a backup. They assume the provider will handle everything. I need to understand what a small SaaS team should back up, how often it should test recovery, and who should own the process.