Business Continuity Policy

1. Purpose

This Business Continuity Policy outlines the strategies and procedures that Sales Advisor employs to ensure service availability, data protection, and rapid recovery in the event of service disruptions, infrastructure failures, or other adverse events.

2. Infrastructure Architecture

Sales Advisor is built on managed cloud infrastructure designed for high availability:

• Application Hosting: The application is hosted on Replit's cloud platform, which provides automatic TLS certificate management, health checks, and deployment capabilities.
• Database: PostgreSQL is hosted on Neon's serverless platform, which provides automatic scaling, point-in-time recovery, and data replication.
• Stateless Application Design: The application is designed to be stateless (sessions stored in the database), allowing for seamless restarts without data loss.

3. Data Backup & Recovery

• Database Backups: Neon serverless PostgreSQL provides continuous backup with point-in-time recovery capabilities. Database state can be restored to any point within the backup retention window.
• Application Code: All application code is version-controlled with Git, with automatic checkpoints created during development. Code can be rolled back to any previous checkpoint.
• Encrypted Credentials: BYOC credentials are encrypted at rest. Encryption keys are managed through the hosting platform's secret management system with separate backup procedures.

4. Service Disruption Scenarios

4.1 Application Server Failure

The hosting platform automatically detects application failures via health checks and restarts the application. Session data persists in the database, so users can continue their work after restart without data loss.

4.2 Database Failure

Neon's managed PostgreSQL service handles database failover automatically. In the event of data corruption, point-in-time recovery allows restoration to a pre-corruption state.

4.3 Third-Party Service Outage

The platform is designed to degrade gracefully when third-party services (OpenAI, Stripe, email providers) are unavailable. Core CRM functionality (lead management, deal tracking, task management) continues to operate independently of third-party services. The health monitoring system detects and reports third-party service status.

4.4 Security Incident

Security incidents are handled according to the Incident Response Policy, which includes containment, investigation, notification, and recovery procedures.

5. Recovery Time Objectives

• Application Restart: Automatic restart via hosting platform health checks, typically within minutes.
• Database Recovery: Point-in-time recovery available through Neon, typically within minutes to hours depending on data volume.
• Full Service Restoration: Target of restoring full platform functionality within 4 hours of a major incident.

6. Communication During Disruptions

In the event of a significant service disruption, affected customers will be notified via email with details of the issue, estimated recovery time, and status updates. Post-incident summaries will be provided for major outages.

7. Policy Review

This Business Continuity Policy is reviewed annually and updated following any significant infrastructure changes or after invocation of recovery procedures. Questions may be directed to info@salesadvisor.ca.