We don’t save backups of your entire site but we do save backups of every single file we touch during our clean ups.
During our clean up, a ‘quarantine’ folder is created and that is where all infected files are kept. They are encrypted and will not harm your site in any way.
We keep backups just in case we need to restore them or compare the code there.