A database in your project
Your app uses the configured database connection. Keep credentials in project environment settings. Avoid exposing the database to the internet when an internal connection is enough.
What the backup covers
The backup covers the database, persistent files and project configuration. Each new copy is restored and checked in a separate environment. We retain the latest verified copy, without version history, and keep the previous copy until the next one passes verification.
Restore boundaries
Verification checks data restoration and service startup, not business logic. User S3 objects are outside the backup: deleted or overwritten objects are not restored. Plan how database records relate to application files.