> ## Documentation Index
> Fetch the complete documentation index at: https://seal-d2ca5bea.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Data backup and disaster recovery

## Data backups

All production data is stored on Google Cloud Platform. For hosting regions, see [Infrastructure](/it-and-security-policies/infrastructure).

|                |                                                                     |
| -------------- | ------------------------------------------------------------------- |
| **Frequency**  | Daily automated backups                                             |
| **Retention**  | 28 days with point-in-time restore                                  |
| **Encryption** | All backups encrypted and replicated across GCP regions             |
| **Scope**      | All application data, uploaded files, and audit logs                |
| **RPO**        | \< 1 hour (point-in-time restore to the last committed transaction) |
| **RTO**        | \< 4 hours                                                          |

Archiving an entity removes it from the UI but preserves the underlying record and its full audit history. GxP records and audit trails are immutable — they cannot be deleted or overwritten by any user or administrator. Personal data subject to GDPR erasure requests is handled through a documented process that preserves audit trail integrity.

Backup retention can be extended on request. For data retention policies, see [Data storage and security](/it-and-security-policies/data-storage-and-security#data-retention).

## Incident response

Seal maintains continuous monitoring for data and security incidents, supported by a 24/7 on-call engineering team to ensure rapid response out-of-hours.

In the event of a security or data incident that affects your organization, Seal will notify your designated technical contacts promptly. Our team provides regular status updates throughout the resolution process.

See the [Disaster recovery plan](/it-and-security-policies/disaster-recovery-plan) for details on our response workflow.

## Disaster recovery

Seal maintains a comprehensive Disaster Recovery Plan (DRP) that is tested through regular quarterly exercises. These exercises validate our recovery procedures and ensure our team can restore services quickly in an emergency.

The alert workflow graphic below represents our mechanism of response to incidents

<img src="https://mintcdn.com/seal-d2ca5bea/O6C1bL0chr_GOdL2/images/Screenshot2025-08-29at12.11.15.png?fit=max&auto=format&n=O6C1bL0chr_GOdL2&q=85&s=e296f65b011c20e071b4da3804f677b9" alt="Screenshot 2025-08-29 at 12.11.15.png" title="Screenshot 2025-08-29 at 12.11.15.png" className="mx-auto" width="3024" height="870" data-path="images/Screenshot2025-08-29at12.11.15.png" />

Google Cloud Platform also maintains its own business continuity and disaster recovery programs.
