Data Protection & Backup

Database backups

Every customer's data lives in its own dedicated SQL Server database, hosted on Microsoft Azure in the US East region. Each database is protected by a continuous, layered backup schedule:

• Transaction log backups every 30 minutes, so that in a recovery scenario the database can be restored to any point in time, limiting potential data loss to the last half hour of activity at most.
• Daily differential backups, capturing everything that changed since the last full backup.
• Weekly full backups of the complete database.

All backups are written directly to Microsoft Azure Blob Storage — physically separate from the database server itself — so that a failure of the server, its storage, or the underlying host does not affect the recoverability of the data.

Retention

• Daily, weekly, and transaction-log backups are retained for 90 days, providing a full quarter of point-in-time recovery coverage.
• Monthly full backups are retained for two years.
• Yearly full backups are retained for five years.

Longer-term monthly and yearly copies are held in Azure's archive storage tier, which is designed for durable, long-horizon retention.

Documents and attachments

Customer documents, images, and file attachments are stored in Azure Blob Storage on a zone-redundant account, meaning every file is replicated synchronously across three physically separate data centers within the region. In addition:

• Soft delete is enabled with a 30-day window, so a document deleted in error — whether by a user or by an administrative action — can be recovered.
• The storage account carries a deletion lock, preventing the account or its containers from being removed even by an administrator without an explicit, deliberate step.

Encryption and isolation

All data is encrypted at rest using AES-256 encryption managed by Microsoft Azure, and encrypted in transit using TLS. Each customer's data is held in a separate, isolated database rather than commingled in a shared table structure, so no customer's records are accessible from another customer's session.

Infrastructure resilience

The platform runs on Microsoft Azure's managed infrastructure, which provides hardware redundancy, automated host recovery, and regionally redundant storage beneath the application layer. Server-level snapshots are additionally taken ahead of any planned maintenance or infrastructure change, giving a rollback point independent of the database backup chain.

Monitoring and verification

Backup jobs are monitored on an ongoing basis, and failures are surfaced for review. Restores are periodically tested to confirm that backups are complete and recoverable.

Questions?

For more on how we handle personal information, see our Privacy Policy, or email privacy@dataaccessinc.com.