# Point-in-time recovery

URL: /systems/trust-and-governance/controls/point-in-time-recovery · Id: `control:point-in-time-recovery`

> Every namespace restores to any past moment from its kept record, and a restore test runs each week.

Every namespace restores to any past moment from its kept record, and a restore test runs each week.

## Satisfies
| Criterion | Text |
| --- | --- |
| [SOC2 A1.2](/systems/trust-and-governance/criteria/soc2/a1-2) | The entity designs, operates, monitors and maintains environmental protections, backups and recovery infrastructure. |
| [SOC2 A1.3](/systems/trust-and-governance/criteria/soc2/a1-3) | The entity tests the recovery plan procedures that support system recovery. |
| [SOC2 CC7.5](/systems/trust-and-governance/criteria/soc2/cc7-5) | The entity identifies, develops and performs activities to recover from identified security incidents. |
| [SOC2 CC9.1](/systems/trust-and-governance/criteria/soc2/cc9-1) | The entity identifies, selects and develops risk mitigation activities for risks from potential business disruptions. |
| [ISO27001 A.8.13](/systems/trust-and-governance/criteria/iso27001/a-8-13) | Backup copies of information, software and systems are maintained and tested on a set schedule. |
| [ISO27001 A.5.29](/systems/trust-and-governance/criteria/iso27001/a-5-29) | Information security holds at an appropriate level during a disruption. |
| [ISO27001 A.5.30](/systems/trust-and-governance/criteria/iso27001/a-5-30) | Technology readiness for business continuity is designed, implemented, maintained and tested. |
| [HIPAA 164.308(a)(7)](/systems/trust-and-governance/criteria/hipaa/164-308-a-7) | The entity keeps a contingency plan with data backup, disaster recovery and emergency mode operation. |

## Implemented by
- [Incident response](/workflows/processes/incident-response)
- [Backups](/code/platform/backups)
- [Database](/code/platform/capabilities/database)

## Test
| Step | Rule |
| --- | --- |
| Kind | Detective: it finds the failure after it happens. |
| Select | Every weekly restore test in the report period. |
| Assert | Each restored a sampled namespace to a past moment within its recovery time target, with records matching the root. |

## Owner
[Reliability Engineer](/agents/engineering/reliability-engineer), [Engineering Team](/agents/engineering).

## Example
The weekly test restores a sampled tutoring marketplace to 14:00 eight days ago in 6 minutes, under its 15-minute target. The restored records match that hour's root.