Component-level RTO and RPO targets.
| Component | RTO | RPO | Notes |
|---|---|---|---|
| Diagnostic processing engine | 24 hours | 4 hours | Restart from last stable state. Diagnostic runs are atomic — either completed with all artifacts or not started. No partial-run data loss. |
| Open Findings browser reports | 4 hours | 24 hours | Backed up via database backup cycle. Open Findings data restored from the most recent backup. |
| Admin and user account data | 4 hours | 24 hours | User accounts, profile data, lead records, and audit logs restored from database backup. |
| Report ownership and quota records | 4 hours | 24 hours | Restored from database backup alongside account data. |
| Source catalog files (uploaded CSVs) | N/A — not applicable | N/A — not applicable | Source catalog files are purged after report generation by design. They are not backed up and cannot be recovered — this is the intended architecture. |