Disaster Recovery

We define Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO) for critical services. Our goal is to restore core functionality within hours, not days, and to minimise data loss. These objectives are reviewed as our infrastructure evolves.

User data is stored in managed databases with redundancy and backup capabilities provided by our infrastructure. We rely on our cloud provider’s resilient storage and backup features. Critical configuration and policy data can be restored from versioned records.

Our recovery procedures cover infrastructure restoration, data recovery, service restart, and validation. We follow a documented runbook for major incidents. Health-safety features and user data access are prioritised in recovery sequencing.

Recovery procedures are tested periodically and reviewed after any significant incident. We document what worked, what did not, and what we changed. Lessons learned feed into our Business Continuity and risk management practices.