Disaster Recovery & Business Continuity Plan
1. Purpose
This document describes Atine Labs™ Limited's approach to disaster recovery (DR) and business continuity (BCP) — ensuring that our services and client platforms can recover from disruption with minimal impact.
2. Recovery Objectives
- Recovery Time Objective (RTO): Critical services: 4 hours; Standard services: 24 hours
- Recovery Point Objective (RPO): Critical data: 1 hour; Standard data: 24 hours
3. Backup Strategy
All client data is backed up daily with point-in-time recovery capability. Backups are stored in geographically separated locations. Backup integrity is verified weekly through automated restore tests.
4. Incident Classification
- Level 1 — Minor: partial service degradation; internal resolution
- Level 2 — Major: significant service disruption; client communication required
- Level 3 — Critical: complete service outage or data compromise; full DR activation
5. Recovery Procedures
Detailed runbooks exist for each service tier. Recovery procedures are tested through scheduled DR drills at least twice per year. Outcomes are documented and used to improve procedures.
6. Communication Plan
Clients are notified via the system status page and direct email within 30 minutes of a Level 2 or Level 3 incident being declared. Updates are provided at least every 2 hours until resolution.
7. Roles & Responsibilities
The DR response team includes designated leads for Infrastructure, Application, Communications, and Client Relations. Escalation paths are defined and tested annually.
Questions about this policy?
Contact our Data Protection Officer or our general administration team.
Atine Labs™ Limited · Registered in Uganda. Origin: Oyam, Uganda.