> For the complete documentation index, see [llms.txt](https://docs.eliapp.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.eliapp.io/confidentialite-et-securite-en/security-operations/data-protection-and-backups.md).

# Data protection & backups

## Executive Summary

Eli implements comprehensive data protection through automated backup strategies and business continuity procedures. Our data protection framework leverages MongoDB Atlas enterprise backup capabilities to ensure data integrity, availability, and regulatory compliance.

## Backup Strategy

**MongoDB Atlas Automated Backups**

* **Continuous backup** with point-in-time recovery capability
* **Daily snapshots** retained for 3 months minimum
* **Weekly snapshots** retained for 12 months
* **Cross-region replication** to Belgium and London for geographic redundancy

**Backup Configuration**

* **Recovery Point Objective (RPO)**: 1 hour maximum data loss
* **Recovery Time Objective (RTO)**: 4 hours maximum downtime
* **Automated backup verification** through MongoDB Atlas monitoring
* **Backup encryption** using same AES-256 standards as production data

## Data Recovery Procedures

**Point-in-Time Recovery**

* **Granular recovery** to any point within the retention period
* **Selective data restoration** for specific collections or documents

**Disaster Recovery**

* **Geographic failover** capability through MongoDB Atlas replica sets
* **Automatic failover** to secondary regions in case of primary region failure
* **Data synchronization** maintained across all replica set members

## Data Isolation & Protection

**Multi-Tenant Security**

* **Application-level organizational isolation** through strict query filtering and validation
* **Automatic organization ID filtering** on all database queries preventing cross-tenant access
* **Access control enforcement** ensuring users only access their organization's data
* **Data export controls** with organization-specific boundaries

**File Storage Protection**

* **Firebase Storage security rules** preventing unauthorized file access
* **User-specific file paths** ensuring proper file isolation
* **Automatic file encryption** through Google Cloud Storage

## Business Continuity

**High Availability Architecture**

* **3-replica MongoDB cluster** with automatic failover capability
* **99.995% uptime SLA** through MongoDB Atlas enterprise tier
* **Load balancing** across multiple availability zones
* **Real-time monitoring** with automatic alerting for performance issues

**Backup Monitoring & Alerting**

* **Backup monitoring** through MongoDB Atlas dashboard
* **Failure notifications** sent immediately to technical team
* **Backup performance monitoring** to ensure RTO/RPO compliance

***

**For questions about data protection or backup procedures, contact:** <security@eliapp.io>

**Last Updated:** August 2025