How and where are backups performed on Wolkvox?
Table of Contents
Description
Wolkvox implements a robust backup strategy to ensure business continuity and data protection against incidents such as ransomware, infrastructure failures, or human error. Backups are performed daily and stored across multiple regions and geographic zones within Google Cloud Platform (GCP). This approach ensures a Recovery Time Objective (RTO) of up to 45 minutes and a Recovery Point Objective (RPO) of 24 hours or less. Furthermore, data is encrypted and protected with strict access controls and is regularly validated through restore tests to ensure its effectiveness.
Characteristics
Frequency and Location of Backups
- Automatic daily backup: All critical customer settings and data are backed up daily, without manual intervention.
- Distributed storage: Copies are replicated across different GCP regions and zones, minimizing the risk of loss due to localized failures.
- Encryption and controlled access: Backups are stored encrypted (AES-256) and are only accessible to authorized personnel, ensuring confidentiality and integrity.
Recovery and Transfer Options
- Guaranteed RTO and RPO: In case of an incident, operation can be restored in up to 45 minutes (RTO) and data can be recovered with a maximum loss of 24 hours (RPO).
- Flexible transfer: Customers can request the transfer of their data to other environments or clouds through RSYNC processes, facilitating portability.
- Backup on PaaS: wolkvox maintains duplicates of the information on the Platform as a Service (PaaS) provider, adding an additional layer of redundancy.
Validation and Effectiveness Testing
- Restoration laboratories: Every 6 months, random restoration tests are performed on critical components to verify that backups are functional and complete.
- Standards-based protocols: Backup strategies follow recognized guidelines, such as ISO 27001 and NIST, ensuring that processes comply with industry best practices.
- Transparency for the customer: Customers can audit backup and recovery processes, and receive reports on the status of their backups.