Q: Is there a documented Disaster Recovery Plan?

• Related Articles

• Q: What are the estimated recovery times (RTO/RPO)?

  A: Recovery Time Objective (RTO) is typically under 4 hours for core services. Recovery Point Objective (RPO) is targeted at under 1 hour due to frequent replication and backup cycles, depending on workload criticality.

• Q: How frequently are backups performed?

  A: Automated backups run daily for databases and virtual machines, with transaction log backups at shorter intervals where applicable. Configuration and infrastructure-as-code repositories are continuously version-controlled.

• Q: Where are they stored (physical location or cloud)?

  A: Backups are stored in Azure Storage accounts with geo-redundant storage (GRS), ensuring replication to a paired Azure region within the EU.

• Q: Is there any technical documentation available regarding compliance?

  A: Yes. Microsoft provides compliance documentation and audit reports through the Azure Trust Center and Service Trust Portal. System-specific compliance documentation (GDPR measures, security configuration, and policies) can be shared under NDA.

• Q: Are they encrypted and replicated across different locations?

  A: Yes. All backups are encrypted at rest with Azure Storage Service Encryption (AES-256) and replicated across geographically separated data centers within the EU. Data in transit is always encrypted via TLS/SSL.