Live India-region Postgres and automated snapshots are Blocked. This runbook tracks planned controls and stub restore drills only — it does not provision infrastructure.
Readiness
36%
Planned (India)
Region
ap-south-1
Provider not set
RTO / RPO
240/60m
Retain 365d
Drills
0 passed
0 failed · 0 open
Region not confirmedDrill pending
Hosting & targets
Control checklist
| Control | Status | Link |
|---|---|---|
India-region primary DB Postgres (or equivalent) hosted in an India region for PHI residency. | Partial Derived from region / retention / drills | — |
Encryption at rest + in transit Disk encryption and TLS for DB connections; keys not in client bundle. | Partial | — |
Automated backup schedule Daily full + continuous/WAL or equivalent meeting RPO target. | Missing | — |
Offsite / secondary copy Second copy in separate AZ or India secondary region. | Missing | — |
Retention ≥ 1 year (breach investigation) DPDP Rule 6 / DPA flow-down: logs and backup retention for investigation. | Ready Derived from region / retention / drills | /dpa |
Restore access control Only DevOps + named facility admins can trigger restore; audited. | Partial | /audit |
Quarterly restore drill Documented restore drill with measured RTO/RPO vs targets. | Missing Derived from region / retention / drills | — |
Start restore drill
Drill log
No drills yet
Start a quarterly restore drill.
Select a drill
Restore steps and sign-off appear here.