Production backups
Weekly DigitalOcean production backups are currently used, with a four-week retention period under the current arrangement.
Implemented
Prepared for disruption. Tested for recovery.
CommsPliant maintains documented backup, restore, incident-response and business-continuity processes to support service recovery when something goes wrong.
The aim is simple: keep recovery responsibilities clear, test the process, and retain evidence that the controls have been exercised.
Backup & Restore
Implemented
Restore capability
Backup restoration has been tested successfully. The current observed restore time is approximately 10 minutes with the present small database and data volume.
This observed result is evidence of the current test, not a universal recovery guarantee for every outage scenario.
Tested
Business Continuity & Disaster Recovery
Documented recovery process
CommsPliant maintains a documented Business Continuity and Disaster Recovery Plan covering recovery responsibilities and response to service disruption.
Documented
BCDR exercise
A production-outage and recovery tabletop exercise was completed on 25 August 2026 with a pass result.
Tested
Incident Response
A documented Incident Response and Personal Data Breach Procedure defines how security incidents are assessed, contained, escalated and managed.
A suspicious-login and traffic-flood tabletop exercise was completed on 25 August 2026 with a pass result.
Tested
Availability & Monitoring
Infrastructure and server performance are monitored continuously using Prometheus, Grafana and Loki to support operational visibility and early identification of service issues.
Operational
CommsPliant does not publish a public uptime guarantee on this page. Any contractual service-level or recovery commitments are agreed separately and must reflect the live production configuration.
Recovery Objectives
Recovery objectives may be agreed with clients as part of the contractual onboarding process.
Specific RPO or RTO values are not published here until the relevant production recovery configuration has been implemented and verified for the commitment being made.
Client-specific / contractual
Tested & Evidenced
Restore capability successfully tested, with an observed result of approximately 10 minutes at the current small data size. This is evidence of the current test, not a universal recovery guarantee.
Suspicious Login and Traffic Flood exercise completed 25 August 2026. Result: Pass.
Production Outage and Recovery exercise completed 25 August 2026. Result: Pass.
Dated DigitalOcean backup and snapshot evidence has been retained.
FAQ
Yes. CommsPliant currently uses weekly DigitalOcean production backups with a four-week retention period under the current arrangement.
Yes. Backup restoration has been tested successfully. The current observed restore time was approximately 10 minutes with the present small database and data volume. This is evidence of that test, not a universal recovery guarantee.
Yes. CommsPliant maintains a documented Business Continuity and Disaster Recovery Plan, and a production-outage and recovery tabletop exercise was completed on 25 August 2026 with a pass result.
Infrastructure and server performance are monitored continuously using Prometheus, Grafana and Loki to support operational visibility and early identification of service issues.
Not publicly. Recovery objectives and any service-level commitments may be agreed with clients during contractual onboarding. Specific RPO or RTO values are not published until the relevant production recovery configuration has been implemented and verified for the commitment being made.
If you need more detail about backup, recovery, business continuity or availability, contact us and we'll help.
Still have questions?
If you need more detail about backup, recovery, business continuity or availability, contact us and we'll help.
Request more informationSupporting Records
The following records support this page:
| Resource | Availability | Action |
|---|---|---|
| Backup and Restore Procedure |
Controlled · On request
|
Request access |
| Business Continuity and Disaster Recovery Plan |
Controlled · On request
|
Request access |
| Incident Response and Personal Data Breach Procedure |
Controlled · On request
|
Request access |
| BCDR-TEST-001 |
Controlled · On request
|
Request access |
| IR-TEST-001 |
Controlled · On request
|
Request access |
| Backup and Snapshot Evidence |
Controlled · On request
|
Request access |
| ISO 27001 Evidence Register |
Controlled · On request
|
Request access |
A request does not automatically mean the full internal document or raw evidence will be provided. Where appropriate, CommsPliant may provide a client-facing version, extract, summary or controlled evidence instead.
Request resilience information