Data Retention, Backup and Recovery

Customer data is encrypted, backed up daily and stored for 30 days in fully-redundant storage.

Details about our policy are below:

Item	Description
Database snapshots, encryption and storage	Violet Labs uses Amazon RDS PostgreSQL databases to securely manage and backup customer data. Cross-region database snapshots are automatically taken nightly and encrypted with an Amazon KMS key. Additionally, RDS database snapshots are taken immediately prior to production deploys. Amazon RDS automatically provides daily automated snapshots within the same region as the RDS in addition to capturing transaction logs every 5 minutes. Both automated snapshots and transaction logs are stored for 30 days.
Recovery objectives	The Violet Labs Recovery Time Objective (RTO) for RDS is 1 hour. The Recovery Point Objective for RDS (RPO) is up to 24 hours if relying solely on daily backups but can be as low as 5 minutes if transaction log backups are utilized for point-in-time recovery.
Database monitoring	The RDS instances are monitored using AWS CloudWatch (for real-time performance, database logs, and alarms) and AWS CloudTrail (for historical API Calls made to the RDS instance). All RDS instances used in production are on private subnets and not publicly accessible.