What CUZY backs up, how often, how long it is kept, and when it is gone. Numbers, not adjectives: these are the figures the terms refer to.
Every community on a paid plan: its database and its files (uploads, profile images, module data), encrypted before they leave the server, stored with Backblaze in the region of the community. Trial communities are not backed up. The first backup of a new subscriber runs within the hour of the first payment.
A backup is also taken before every HumHub upgrade and before every deletion of a paid community.
| Team | Business | |
|---|---|---|
| Backup frequency | daily | hourly |
| Most you can lose (recovery point objective) | 24 hours | 1 hour |
| Time to restore we aim for (recovery time objective) | 8 hours | 4 hours |
| Hourly backups kept | none | the last 72 |
| Daily backups kept | 30 | 60 |
| Weekly backups kept | 12 | 12 |
| Monthly backups kept | 12 | 12 |
| Backups taken before an upgrade or on request | kept 90 days, at least the last 3, as long as the community exists | the same |
| Restore test | every quarter, a random community | every month, a random community |
| Your own export (database and files) | self-service, once per 24 hours | self-service, once per 24 hours |
The backup taken before a deletion follows the deletion rules of section 5: it is purged with the community's other backups.
The restore time is a target measured by our own restore tests; the achieved values are published on the security page once six months of tests exist. Point-in-time recovery between two backups and a second copy with another provider are not offered at present.
In the region you chose for the community: Germany (EU) or the USA. Singapore is the exception: our backup provider has no Asian data center, so the encrypted backups of a Singapore community are stored in the United States. The backups are encrypted on the server before upload; the provider never holds the key.
The storage keeps prior versions of every file for 30 days, so a deletion by mistake or by a compromised key can be undone within that time.
| Event | What happens | When everything is gone |
|---|---|---|
| Trial ends without a subscription | suspended, archived after 14 days, deleted 14 days later | 28 days after the trial end; nothing was backed up |
| Subscription ends | archived about 30 days after the end date (unreachable, data kept); deleted with its backups at the latest 6 months after the end date, earlier on request | at the latest 6 months after the end date |
| You delete the community yourself | 7-day grace period during which you can cancel; then deleted | backups purged 30 days after the deletion |
| You ask for deletion of a specific person's data | handled by the community's administrators with the tools of HumHub; CUZY assists | the next backup cycle no longer holds it; old backups expire by the schedule above |
| Your own export | a download link valid 24 hours | the file is deleted after 48 hours |
Deletion covers the live data and every backup. Prior file versions kept by the storage for recovery expire 30 days later. After that, nothing remains except what the law makes us keep: invoices, for six years.
