When I was running some IT for our startup we used FreeNAS with ZFS (and had off site, borg backups), from my understanding we could just get to the last snapshot for the (unencrypted) data? (sorry, no IT admin but developer ;-)