Security questionnaire answers › Infrastructure
How often do you back up data, and how long are backups kept? How to answer it in a security questionnaire
Why buyers ask this
Backups define how much data could be lost, and retention affects privacy obligations.
What a strong answer includes
- State frequency (continuous point-in-time, daily snapshots).
- State retention period and how backups are encrypted and protected.
- Mention restore testing.
Sample answer to adapt
Replace the bracketed parts with your own facts. Only state what is true for your environment.
Production databases use [continuous/point-in-time] backups with [daily] snapshots retained for [35 days]. Backups are encrypted, stored in [separate account/region], and restores are tested [quarterly].
Evidence to attach
- Backup configuration
- Restore test record
- Retention policy
Common mistakes
- Retention longer than the deletion commitment you give customers.
Answer questionnaires from your own documents
Korrali Trust drafts answers from your policies and evidence so every response traces back to its source, and a person reviews it before it goes out.