Live snapshot, generated on request · /status.json for machines
Backups run nightly with restore drills; tenant isolation is enforced at the data layer; see /security for the full posture.