What this control means
Point-in-time recovery covers the last seven days continuously. A weekly encrypted backup is written to a second provider in a different region, and every backup run restores itself into a fresh database and checks row counts.
What we found
Weekly encrypted backup to Cloudflare R2 (Oceania) with an automatic restore test on every run is built and scheduled. Awaiting the first run.
How we verified it
- Created a read-only database role for backups; the main database password is not used.
- Backups are encrypted before they leave the build machine with a key the storage provider never holds.
- Each run restores the backup into a throwaway database and compares row counts with production, failing loudly on any mismatch.
Still to do
- First run and its restore report.
Evidence (private, draft only): kuraplan-st4s-evidence/06-data/2026-09-15-backups.md
Questions about this control: security@kuraplan.com