Protection
Database and private objects are backed up separately; access and restoration remain tenant- and role-controlled.
Operations
Backup & recovery
Recovery is maintained as an operational process to be tested regularly, not merely as a backup promise.
Evidence
Restore tests are scheduled and recorded after completion. RPO and RTO are maintained per data class as operational objectives; approved evidence is available on request once a current record exists.
Communication
Deviations and incidents are communicated through the status and incident process.