🔄

Disaster Recovery & Business Continuity Plan

Effective: October 2026 Last updated: October 2026 Version 1.0

1. Purpose

This document describes Atine Labs™ Limited's approach to disaster recovery (DR) and business continuity (BCP) — ensuring that our services and client platforms can recover from disruption with minimal impact.

2. Recovery Objectives

  • Recovery Time Objective (RTO): Critical services: 4 hours; Standard services: 24 hours
  • Recovery Point Objective (RPO): Critical data: 1 hour; Standard data: 24 hours

3. Backup Strategy

All client data is backed up daily with point-in-time recovery capability. Backups are stored in geographically separated locations. Backup integrity is verified weekly through automated restore tests.

4. Incident Classification

  • Level 1 — Minor: partial service degradation; internal resolution
  • Level 2 — Major: significant service disruption; client communication required
  • Level 3 — Critical: complete service outage or data compromise; full DR activation

5. Recovery Procedures

Detailed runbooks exist for each service tier. Recovery procedures are tested through scheduled DR drills at least twice per year. Outcomes are documented and used to improve procedures.

6. Communication Plan

Clients are notified via the system status page and direct email within 30 minutes of a Level 2 or Level 3 incident being declared. Updates are provided at least every 2 hours until resolution.

7. Roles & Responsibilities

The DR response team includes designated leads for Infrastructure, Application, Communications, and Client Relations. Escalation paths are defined and tested annually.

Questions about this policy?

Contact our Data Protection Officer or our general administration team.

Atine Labs™ Limited · Registered in Uganda. Origin: Oyam, Uganda.