# Data protection & backups

## Executive Summary

Eli implements comprehensive data protection through automated backup strategies and business continuity procedures. Our data protection framework leverages MongoDB Atlas enterprise backup capabilities to ensure data integrity, availability, and regulatory compliance.

## Backup Strategy

**MongoDB Atlas Automated Backups**

* **Continuous backup** with point-in-time recovery capability
* **Daily snapshots** retained for 3 months minimum
* **Weekly snapshots** retained for 12 months
* **Cross-region replication** to Belgium and London for geographic redundancy

**Backup Configuration**

* **Recovery Point Objective (RPO)**: 1 hour maximum data loss
* **Recovery Time Objective (RTO)**: 4 hours maximum downtime
* **Automated backup verification** through MongoDB Atlas monitoring
* **Backup encryption** using same AES-256 standards as production data

## Data Recovery Procedures

**Point-in-Time Recovery**

* **Granular recovery** to any point within the retention period
* **Selective data restoration** for specific collections or documents

**Disaster Recovery**

* **Geographic failover** capability through MongoDB Atlas replica sets
* **Automatic failover** to secondary regions in case of primary region failure
* **Data synchronization** maintained across all replica set members

## Data Isolation & Protection

**Multi-Tenant Security**

* **Application-level organizational isolation** through strict query filtering and validation
* **Automatic organization ID filtering** on all database queries preventing cross-tenant access
* **Access control enforcement** ensuring users only access their organization's data
* **Data export controls** with organization-specific boundaries

**File Storage Protection**

* **Firebase Storage security rules** preventing unauthorized file access
* **User-specific file paths** ensuring proper file isolation
* **Automatic file encryption** through Google Cloud Storage

## Business Continuity

**High Availability Architecture**

* **3-replica MongoDB cluster** with automatic failover capability
* **99.995% uptime SLA** through MongoDB Atlas enterprise tier
* **Load balancing** across multiple availability zones
* **Real-time monitoring** with automatic alerting for performance issues

**Backup Monitoring & Alerting**

* **Backup monitoring** through MongoDB Atlas dashboard
* **Failure notifications** sent immediately to technical team
* **Backup performance monitoring** to ensure RTO/RPO compliance

***

**For questions about data protection or backup procedures, contact:** <security@eliapp.io>

**Last Updated:** August 2025


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.eliapp.io/confidentialite-et-securite-en/security-operations/data-protection-and-backups.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.