CloudHealth Disaster Recovery, Data Resilience, and Security Framework

Products

• CloudHealth

Issue/Introduction

This article provides an overview of CloudHealth’s architecture regarding Disaster Recovery (DR), backup verification, data encryption, and Data Loss Prevention (DLP). It serves as a compliance and technical reference for understanding how customer data is protected, replicated, and verified across CloudHealth's global cloud footprint.

Resolution

1. Disaster Recovery & Backups:

• Backup Type & Synchronization: The system utilizes continuous data replication rather than a standard cold, warm, or hot standby site. CloudHealth employs real-time replication across infrastructure zones to prevent data loss, alongside routine daily system backups.
•  Geographically Remote Site: Yes. Daily backup copies of the production data and databases are securely transmitted and stored in a completely separate, geographically remote cloud region to ensure off-site recovery capabilities.
• Verification: Backups are also subject to automated restoration testing at least once every quarter to ensure data integrity and emergency readiness.

2. Cloud Resilience & Data Encryption:

• Encryption Mandate: Yes, all customer data is strictly encrypted both at rest and in transit (via TLS over public networks). This encryption applies universally across the platform's cloud footprint.
• Infrastructure Location: CloudHealth’s production environments are hosted globally within Google Cloud Platform (GCP) and Amazon Web Services (AWS) infrastructure boundaries outside of Israel.

3. Backup Verification & Restore Drills:

•  Yes, system and data backups are regularly tested and verified.  According to the CloudHealth SOC 2 Type II report, backup restoration procedures are subjected to automated testing at least once per quarter to ensure data integrity, completeness, and emergency readiness.
  
  
•  Yes, periodic backup and restore drills are performed.  According to the CloudHealth SOC 2 Type II report, backup restoration procedures are subjected to automated testing at least once per quarter to verify data integrity and operational readiness.

4. Data Loss Prevention (DLP):

• Yes, CloudHealth employs Data Loss Prevention (DLP) and data protection mechanisms as part of its security framework.