Backups and recovery (hosted service)

Measured, not promised:

• Backups. A nightly database backup and a daily snapshot of the encrypted disk, each kept for 7 days, in Ireland. A missing snapshot raises an alarm within a day.
• Point-in-time recovery (since 31 October 2026, with 2026.11.1). The database's changes are archived continuously, with a full backup every day, so the database can be brought back to a chosen moment. At most about five minutes of changes can be lost, instead of up to a day. In the drill, restoring a 700 MB copy of the database to a chosen moment took 52 seconds, and nothing committed before that moment was lost. Archiving that stops, falls behind or misses its daily backup raises an alarm.
• Rebuilding a lost machine. In the last drill (2026-10-30), a new machine was rebuilt from the backups alone in about six minutes; the database part took about one minute.
• Files. A deleted file can be recovered for 7 days from its own storage. Since 2026.11.1 every file is also copied to a second European region (Frankfurt), where a deleted file stays recoverable for 30 days. A file was restored from that copy and compared byte for byte.
• What is not covered. Both copies of the files, and the backups, are in the same cloud account: losing that account loses them all.