Disaster Recovery

DR Posture

Recovery targets, declared backup configuration, and the latest recorded drill result.

Source: docs/compliance/dr-drills/dr-posture.json · Last updated 2026-10-01

Recovery Targets

RTO target

4 hours

Target time to restore service after a declared incident.

Not yet verified by a drill.

RPO target

24 hours

Target maximum data-loss window.

Not yet verified by a drill.

Availability target

99.9%

Target service availability.

Backup Posture

Not yet verified. The settings below are the hosted service's backup configuration; no restore test is recorded in this posture file.

Strategy

nightly pg_dump -Fc at 03:00 UTC, encrypted on the host to a public GPG key, kept 7 days on the host; an offsite copy is pulled daily to the operator's PC and kept 30 days; WAL archiving off. The 24-hour RPO target assumes the droplet survives; if it is lost, recovery is from the newest offsite copy, so the RPO target is 24 hours plus the daily pull lag (about 33 hours when the pull runs on schedule)

Retention

7 days

Cross-region copy

Not configured

WORM lock

Not configured

Latest Drill

Drill log: docs/compliance/dr-drills/dr-drill-log.md

No drill result published yet

The recovery targets above are not yet verified by a published drill result.

References

DR runbookdocs/operate/disaster-recovery.md

DR posture dashboardmonitoring/grafana/dashboards/dr-posture.json

Drill log (append-only)docs/compliance/dr-drills/dr-drill-log.md