Business continuity. Restore is rehearsed, not assumed.

Daily automated backups

The evidence database is backed up automatically every day, kept for seven days, and can be restored to any moment inside that window. Deletion protection is enabled on the underlying infrastructure.

Point-in-time recovery

Beyond daily snapshots, the evidence stores support point-in-time recovery — rolling back to a moment, not just to last night.

The restore drill

We don't assume restore works; we rehearse it and keep the evidence of the rehearsal — in the spirit of the product itself. The most recent complete restore drill took 14 minutes end to end.

Managed infrastructure

The platform runs entirely on Google's managed London-region services — compute, database and delivery are Google-operated, patched and monitored infrastructure, not hand-fed servers.

Rebuildable by design

The entire platform is reconstructable from version-controlled code, documented runbooks and backups. That path is exactly what the restore drill proves.

Retention

Evidence is append-only and retained for the life of your subscription — nothing ages out silently, nothing is quietly compacted away.

Ownership & export

The record is yours, and you don't have to ask for it: a site administrator can export the complete site record from inside the product (Settings → Admin · site records) — a ZIP whose manifest states exactly what's included and what isn't. Every export is itself recorded on the audit trail, with an optional stated reason. Your evidence is never contractually captive.