SecurityUpdated 2026-05-13

Backups, RPO, and RTO

Continuous WAL backups with point-in-time recovery to any second in the last 7 days. RPO 1 minute, RTO 4 hours.

Backup strategy: - Continuous WAL streaming to a separate region - Point-in-time recovery to any second in the last 7 days - Full daily snapshots retained 30 days - Monthly cold archives retained 7 years for audit and certificate records

Targets: - RPO: 1 minute - RTO: 4 hours for full-tenant recovery, 1 hour for partial

DR drill: run quarterly. Drill summary available under NDA.

Where is our data stored?Primary data lives in Supabase Tokyo (ap-northeast-1). Pakistan residency option available for buyers that require it under PDPA-2023.
How is data encrypted?AES-256 at rest, TLS 1.3 in transit, application-level encryption for CNICs and any sensitive PII fields.
How is access controlled?Role-based access, row-level security on every tenant table, audit trail on every privileged action. Optional SSO with SAML 2.0.
Who are your sub-processors?Supabase, Cloudflare, Resend, Twilio, Mux, OpenAI/Anthropic for AI agents. Current list maintained at /aizaadi/help/sub-processors.

Backups, RPO, and RTO

Related articles

Still have questions?