At a glance
NEXT AI backs up databases and files on Amazon Web Services (AWS). Databases use the AWS backup solution plus a continuous change stream to S3; file storage is on Amazon S3 with multi–data center protection. Backups are encrypted at rest, monitored (CloudWatch), and tested under NEXT AI’s Disaster Recovery plan. Deletions propagate to backups per retention policy (full purge typically within <60 days).
What we back up & how
Databases: AWS-managed backups, plus continuous change stream to S3 for recovery/audit.
Files (media & artifacts): Stored on Amazon S3 with continuous protection across multiple data centers; backups are encrypted at rest.
Logs: See Logging & monitoring for retention specifics.
Frequency, storage & monitoring
Frequency: Backups are automatic and continuous.
Storage location: Backups are also written to a separate AWS region in the same country.
Security: Backups are encrypted the same way as production data.
Monitoring: CloudWatch alerts on backup status; failures raise an incident to the Security Officer.
Restore & testing
Restore drills: Disaster Recovery (technical testing) includes restore from backups and alternate-site exercises at least annually.
Objective: The Disaster Recovery plan targets restoring full operations within 24 hours of a disaster/outage.
Standards alignment
ISO/IEC 27002:2022 control 8.13 – Information backup (define, secure, and test backups to enable timely recovery).
Related topics
Data retention & sanitization (backup purge timeline)
FAQ
Q: How often are NEXT backups taken?
Backups run automatically—by default, hourly, with a continuous change stream for databases.
Q: Are backups encrypted?
Yes. Backups are encrypted at rest using the same controls as production data.
Q: Where are backups stored?
On AWS, with copies also written to a separate region in the same country. File storage uses Amazon S3 across multiple data centers.
Q: Do you test restores?
Yes—annual Disaster Recovery testing includes restore-from-backup and alternate-site exercises; the plan targets restoring full operations within 24 hours of a disaster/outage.
Q: How long until deleted data is removed from backups?
Per Data retention & sanitization, backup systems typically purge within <60 days after deletion/sanitization.
Q: Which standards does this align with?
ISO/IEC 27002:2022 control 8.13 (Information backup); DR/contingency practices follow recognized guidance (see NIST SP 800-34 Rev.1).