Required before production
- Documented RPO and RTO
- Regular database and object-store recovery tests
- Infrastructure rebuild runbook
- Incident-response plan and tabletop exercise
- Emergency operational access under controlled break-glass procedures
- Customer data export and contract-exit procedure