Monitoring & Backup

Logging and monitoring

Rockhopper uses centralized logging and real-time monitoring across all systems:

System	Purpose
AWS CloudWatch	Centralized application log aggregation, search, and analysis
AWS CloudWatch Metrics & Alarms	Real-time monitoring of traffic, API response times, error rates, and database performance — with automatic alerting when thresholds are exceeded
AWS CloudTrail	Security monitoring and audit logging of API activity across the AWS environment
Intrusion detection	Continuous monitoring of network activity for anomalous behavior and early detection of potential security breaches, with automated alerting
Threat detection	Automated analysis of cloud activity for malicious behavior, unauthorized access attempts, and compromised resources
Sentry	Real-time error tracking and alerting for application exceptions
Anti-malware	Deployed on applicable infrastructure, automatically updated, and configured for periodic scanning

All logs are retained according to AWS CloudWatch retention policies and are accessible only to authorized personnel. Logs never contain authentication tokens, credentials, or other restricted data.

Incident response

Rockhopper maintains a formal Incident Response Plan that defines procedures for detecting, responding to, and recovering from security events and incidents. The incident response plan is tested annually through tabletop exercises to validate readiness. Post-incident reviews are conducted after any significant operational issue to capture root causes and drive preventive improvements.

Backup and recovery

Version snapshots

Spreadsheet version snapshots are stored in Amazon S3 with highly durable storage classes, providing 99.999999999% (11 nines) durability. Each committed version is an immutable snapshot that cannot be overwritten.

Database backups

Protection layer	Details
Daily snapshots	Automated daily backups of all database clusters
Point-in-time recovery	Continuous backup with the ability to restore to any second within the last 24 hours
High availability	Production databases run in multi-AZ configurations with automatic failover

Backup retention

All backups are stored in a secure remote location and retained for 60 days. Backups are tested annually by the engineering team to verify they can be restored and meet defined recovery time requirements.

Disaster recovery

Rockhopper maintains a documented Business Continuity and Disaster Recovery (BC/DR) Plan that is tested annually through simulated service disruptions. Test results are documented and used to improve recovery procedures.

In the event of a service disruption:

• Database failover to a standby replica is automatic

• Version snapshots in S3 are replicated across multiple availability zones

• Application services can be redeployed from infrastructure-as-code definitions