Backup and recovery summary.
TvRMM maintains automated production backups and tested recovery procedures for the hosted service. This self-attested summary omits backup locations, credentials, recovery routing, and detailed internal topology.
TvRMM is not currently SOC 2 audited. We are building and maintaining a SOC 2-aligned security program with an initial focus on Security, Availability, and Confidentiality. The materials in this public package are self-attested and provided for transparency. They are not a SOC 2 report, certification, or independent assurance opinion.
Current program status.
Last updated: 2026-07-10. This summary states the current recovery evidence and its limits without promising guaranteed recovery objectives.
| Area | Status |
|---|
| Production backup automation | Operating evidence confirms scheduled production database backups and backup-job monitoring. |
| Recovery validation | In July 2026, TvRMM restored production-derived backup data into a separate isolated target and validated application health. |
| Agent continuity | The isolated validation confirmed that a controlled existing agent could reconnect to the restored service using its existing identity, without fresh enrollment. |
| Cleanup | The temporary recovery target was removed after validation and the controlled agent returned to its normal operating path. |
| Recovery objectives | Internal recovery measurements are retained for readiness review. TvRMM does not publish or guarantee recovery-time or recovery-point objectives at this stage. |
Testing approach
Recovery tests are designed to exercise the application, database, service identity, and controlled agent-reconnect path without redirecting production agents or changing public service routing. Tests are repeated on the recovery evidence cadence and after material changes to backup, deployment, identity, or agent-authentication processes.
Customer responsibility
TvRMM backups protect the hosted service. Customers remain responsible for endpoint backups, local administrator access, business continuity plans, and recovery procedures for systems they manage with TvRMM.
Scope and limitations
This summary describes a completed isolated validation, not a full production failover or a test of every production agent. It does not imply independently audited resilience, uninterrupted availability, or guaranteed recovery objectives.