Backups: nightly snapshots, weekly offsite copies, how to restore
A backup you have never seen restored is a hope, not a plan. This page says what is copied, where, how often, and what actually happens when one is needed.
On this page
What is in a snapshotWhat a restore looks likeRestoring one record, not everythingKeep your ownWhat is in a snapshot
The whole workspace: every record, the audit log, and every uploaded file — still encrypted, so a backup that fell into the wrong hands would be as unreadable as the live copy. A snapshot is one workspace; restoring yours does not involve anyone else's.
What a restore looks like
You tell support the date. The snapshot from that night is brought up as a second copy of your workspace at a temporary address, so you can look at it next to the live one. When you confirm, it replaces the live workspace, and the replaced one is itself kept as a snapshot for a month in case the decision was wrong. Expect a restore to take under an hour from the request during working hours.
Restoring one record, not everything
Most "I need a backup" moments are one deleted tenant or one voided invoice. Deleted records are kept for thirty days in Settings › Automation › Recently deleted and come back with one click — no restore needed. Voided invoices are never deleted at all.
Keep your own
Settings › Automation › Export produces an archive of everything you own in open formats. Leaving Premises describes the contents. Downloading one each month and keeping it somewhere of your own is the simplest insurance there is, and the audit log will show that you did.
Related
Describes the platform as it is today. Something out of date? Tell us. · help 0.12.3