Default backup posture
| Layer | Backup method | Retention |
|---|---|---|
| Application code | Git, with mirrors to your remote | Forever, by design |
| Static assets | Built artefacts in your CDN provider | Provider default |
| CMS content | Provider-native versioning (Sanity, Payload, etc.) | Provider default |
| Database | Daily automated snapshots | 30 days, rolling |
| Secrets | Your password manager + provider-level rotation | Per your policy |
Restore runbook
A one-page document delivered at hand-off covering:
- Restore-from-scratch commands for the application
- Restore-from-snapshot procedure for the database
- DNS and certificate recovery
- Contact escalation list for each provider
What you opt into separately
- Off-region database replication
- Point-in-time recovery beyond 30 days
- Quarterly disaster-recovery drills
- 99.95%+ uptime SLAs (we will quote against a managed-services partner)