# Database Backup Standards · SEC-03

## Standard Metadata

- Area: Security
- Owner: Security group
- Last reviewed: 2026-09-09
- Next review due from: 2026-12-01
- Enforcement: Code review
- Status: Active

## Overview

An effective database backup strategy ensures that, in the case of database deletion, unavailability, or corruption, a system can promptly recover by using a recent backup, thereby minimising business disruption.

## A database backup strategy must be implemented in production environments · SEC-03.1 · **MUST** · **DEV**

For production environments where Audacia is responsible for a system's infrastructure, a database backup strategy must be agreed with the client and documented in the project's wiki.

## Any backup strategy must enable compliance with any applicable data privacy legislation · SEC-03.2 · **MUST** · **DEV**

If a database contains personally identifiable information, a process must be agreed with the client to ensure that a user's right to be forgotten under GDPR legislation is honoured. In the event of a database backup being recovered, any user who has requested to be forgotten must have their information removed.