One example method includes capturing IOs, adding the IOs to a journal, adding undo data to the journal for one or more locations, and using the IOs and the undo data to determine when, during a timespan defined by the journal, a backup could have been taken. This determination may involve the use of undo data which indicates what the content of a particular location was prior to the first IO directed to that location during the timespan defined by the journal.