Continuous WAL streaming
ActiveEvery write is shipped to encrypted S3-class storage within 60 seconds. Multi-region replication (primary: us-east-1, replica: us-west-2).
Daily full snapshots
ActiveEncrypted at rest (AES-256). Retained 30 days rolling. Enterprise tier: 7-year retention for HIPAA §164.316(b)(2)(i).
Point-in-time recovery (PITR)
ActiveRestore the entire database — or a single tenant — to any second within the last 7 days. Available to clinic Owners on request; typical turnaround < 4 hours.
Tenant-scoped exports
ActiveEvery clinic can export their own PHI on demand at /app/export (JSON + CSV, cryptographically signed). Fulfills HIPAA §164.524 patient access rights and 21st Century Cures Act interoperability.
Quarterly DR drills
ActiveFull failover rehearsal every 90 days. Last drill: 2026-06-22 (zero downtime, RTO measured 41 min). Next drill: 2026-09-22.
Immutable audit log
ActiveAll PHI access, config changes, and admin actions written to an append-only log. Retained 6 years per HIPAA §164.312(b). Exportable to your SIEM.
Encryption in transit & at rest
ActiveTLS 1.3 in transit (HSTS + certificate pinning). AES-256-GCM at rest. Keys rotated every 90 days; separate KEK per tenant.
Business continuity
ActiveRead replicas serve traffic during primary maintenance. Zero-downtime schema migrations. Blue/green deploys for the app tier.
Need a formal DR runbook for procurement?
Enterprise clinics and DSOs can request the full 32-page Disaster Recovery & Business Continuity Plan (BCDR) covering incident classification, escalation tree, RACI, communication templates, and post-mortem process — countersigned under NDA.
Request the BCDR runbook