Security Policy
Backup and Recovery Policy
Last updated: 2026-05-20
Scope
This policy covers production data and critical application configuration for the Life Care International platform, including relational database records and platform configuration required for service recovery.
Backup Frequency and Retention
Automated backups are run daily for persistent production data stores.
Backups are retained according to provider capabilities and internal retention configuration.
Recovery Objectives
Recovery Point Objective (RPO): up to 24 hours for standard daily backup coverage.
Recovery Time Objective (RTO): restoration target is within one business day after incident triage.
Security of Backups
Backup transfer and access paths use encrypted transport (TLS/HTTPS).
Backup storage is protected through infrastructure-provider encryption-at-rest controls.
Access to backup administration is restricted to authorized operations personnel.
Restore Testing
Recovery procedures are tested periodically to validate data integrity and operational readiness.
Material findings and remediation tasks are tracked through internal engineering workflows.
Incident Escalation
If backup or restore failures are detected, incidents are escalated to the platform owner and engineering lead for immediate triage and remediation.