Purpose and scope

This Back Up Policy explains how Sportworks protects Customer Data that is stored or processed through the Sportworks platform. It applies to all Customer Data in production systems used to provide the services described in your agreement and documentation.

Roles and responsibilities

Sportworks is responsible for creating, storing, encrypting, monitoring, and testing platform back ups, and for restoring Customer Data from the most recent viable back up when required. Customers are responsible for the accuracy and legality of Customer Data they provide and for maintaining any local copies or exports needed for their own business continuity needs.

Data covered

Customer Data stored in the production database
files stored by or for the service such as logos images and documents
system configuration and metadata that is required to operate customer workspaces

This policy does not cover customer devices local networks or any systems not managed by Sportworks.

Back up objectives

Recovery Point Objective
no more than one hour of data loss in normal operating conditions
Recovery Time Objective
aim to complete standard restores within eight business hours for single customer data sets once a restore is begun
Actual restore times may vary based on data volume and incident conditions. These objectives are targets rather than guarantees.

Back up schedule

Production databases
continuous point in time back ups with snapshot capture at regular intervals
Application file storage
daily incremental back ups and a weekly full back up
System configuration
daily back up

Retention

Standard retention for database and file back ups
thirty days rolling
Longer retention for security and audit logs
ninety days rolling
Back ups older than the retention period are deleted on a rolling basis.

Storage locations and encryption

Back ups are stored in independent cloud storage in the same general region as the primary production environment to support regional data residency where possible. At rest encryption with industry standard algorithms is applied to all back ups. Data in transit is protected with TLS.

Integrity and testing

Back up jobs are monitored with alerts on failures. Sportworks performs periodic test restores to validate back up integrity and run book steps. Findings from tests are used to improve restore procedures.

Restore requests

Operational incidents
If Sportworks determines that Customer Data has been lost or corrupted in the platform, Sportworks will use reasonable commercial efforts to restore from the most recent viable back up as the exclusive remedy for loss or damage to Customer Data, consistent with the Master Terms .
Customer initiated restore
If a customer requests a point in time restore for reasons not caused by a Sportworks service issue, Sportworks may offer a professional service on a time and materials basis. Feasibility depends on data volume and whether a point in time back up exists for the requested moment.

Export on termination

Upon termination, a customer may request delivery of the most recent back up within ten days after the effective termination date. Sportworks will use reasonable commercial efforts to deliver that back up within thirty days of receiving the written request. The customer is responsible for reasonable costs associated with preparation and delivery of the export, in line with the Master Terms termination clause .

Sub processors

Sportworks may use reputable cloud service providers and other sub processors to create store and protect back ups. All sub processors are bound by written terms that require equivalent security and confidentiality protections, consistent with the data processing terms in customer agreements .

Security controls summary

access to back up repositories is restricted to authorised personnel with multifactor authentication
least privilege access is enforced through role based controls
back up keys and secrets are managed in secure vaults
back up media never leaves managed cloud environments
change management is used for back up configuration and restore procedures

Service exclusions and limits

This policy does not cover third party systems that a customer integrates on their own, nor does it cover customer operated networks devices or browsers. Sportworks is not responsible for data loss caused by third parties except those it sub contracts to perform services related to Customer Data maintenance and back up, consistent with the Master Terms .

Policy changes

Sportworks may update this Back Up Policy from time to time. The current version will be posted at the policy URL. Continued use of the services after an update means acceptance of the updated policy.

Contact

Questions or requests under this policy
build@sportworks.io