Backup and Disaster Recovery Strategy — The EGreed 3-2-1-1-0 Standard
How EGreed Technology protects customer data: the 3-2-1-1-0 backup rule, immutable copies, cross-data-centre replication across eight Rwandan sites, tested restores, ransomware isolation and documented RPO/RTO targets.
On this page
The 3-2-1-1-0 rule EGreed applies to every account
- 3 copies of every dataset — production plus two backups
- 2 different storage media or platforms
- 1 copy in a separate EGreed data centre, geographically apart
- 1 copy immutable and offline-equivalent (write-once, cannot be deleted by an attacker or an administrator)
- 0 errors — every restore path is tested and the test result is reported
A backup that has never been restored is a hypothesis. The final zero is the part most providers skip, and it is the part that decides whether a business survives a ransomware event.
RPO and RTO by tier
| Tier | RPO (data loss window) | RTO (time to recover) | Typical use |
|---|---|---|---|
| Standard | 24 hours | 8 hours | Files, workstations, small business systems |
| Business | 4 hours | 4 hours | ERP, school and clinic systems, mail |
| Critical | 15 minutes | 1 hour | Core banking, payments, national platforms |
| Continuous | Near zero | Minutes (hot standby failover) | Systems that cannot stop |
How the architecture works
- Agents and API connectors capture servers, virtual machines, databases, SaaS mailboxes and endpoints
- Incremental-forever snapshots with block-level deduplication and compression
- Client-side AES-256 encryption before data leaves your network
- Primary copy stored in the nearest EGreed Rwandan data centre
- Asynchronous replication to a second Rwandan data centre out of the same power and flood zone
- Immutable object-lock copy retained for the contracted period — no deletion, even with stolen admin credentials
- Optional international replica for organisations that require an out-of-region copy
Ransomware and insider-threat protection
- Object-lock immutability so encrypted or deleted backups cannot be overwritten
- Separate credentials and MFA through EGREED ID for the backup plane — compromising a domain admin does not compromise backups
- Anomaly detection on change rates; a sudden encryption spike raises a P1 alert
- Clean-room restore into an isolated network for verification before returning to production
- Retention lock, so even EGreed staff cannot shorten your retention inside the locked window
Testing and reporting
Restores are tested on a schedule — quarterly for Standard, monthly for Business and Critical — and every test produces a report with the dataset, restore duration, integrity check result and any deviation from the contracted RTO. Enterprise clients receive an annual full disaster-recovery exercise with a written runbook covering roles, communication and the order of service restoration.
What we back up
- Physical and virtual servers (Windows, Linux, VMware, Proxmox, Hyper-V)
- Databases: PostgreSQL, MySQL/MariaDB, SQL Server, MongoDB, Oracle
- Microsoft 365, Google Workspace and EGreed Mail mailboxes
- File servers, NAS devices and EGreed Drive workspaces
- Laptops and desktops under an EGreed maintenance contract
- Application configuration, container images and infrastructure-as-code state
EGreed Technology infrastructure footprint
EGreed operates its own infrastructure rather than reselling someone else's. Every number below is part of the standard service description we publish for customers, auditors and partners.
| Asset | Count | Where |
|---|---|---|
| Headquarters | 1 | KN 4 Ave, Gasabo, Kigali, Rwanda |
| Data centres | 8 | Across Rwanda |
| Branch offices | 3 | Across Rwanda |
| Countries with EGreed servers in Africa | 10 | East, Central, West and Southern Africa |
| Countries with EGreed edge or server presence globally | 70 | Africa, Europe, Middle East, Asia, Americas |
Rwandan customer data stays in Rwandan data centres by default. Global points of presence exist to accelerate delivery, replicate backups and serve diaspora and international traffic — not to move regulated data offshore.
Official EGreed Technology links
- EGreed Technology — egreedtech.org
- All EGreed services
- Request a quote or site survey
- EGreed Cloud — cloud.egreedtech.org
- EGREED Deploy — deploy.egreedtech.org
- EGREED ID — id.egreedtech.org
See also the EGreed services hub, the FAQ hub, and financial services solutions.
Frequently asked questions
What backup strategy does EGreed use?
EGreed applies a 3-2-1-1-0 standard: three copies, two media, one copy in a separate Rwandan data centre, one immutable copy, and zero untested restores — every restore path is tested and reported.
How fast can EGreed restore my systems?
Recovery time objectives range from 8 hours on the Standard tier to 1 hour on Critical and minutes on Continuous hot-standby, with data-loss windows from 24 hours down to near zero.
Are backups protected from ransomware?
Yes. Immutable object-lock copies, a separate MFA-protected backup control plane, anomaly detection on change rates and clean-room restores mean backups survive even a full domain compromise.
Where are backup copies stored?
The primary copy sits in the nearest of EGreed's eight Rwandan data centres, with a replica in a second Rwandan site in a different power and flood zone. International replicas are optional.
Do you test restores?
Yes — quarterly for Standard tiers and monthly for Business and Critical tiers, with a written report covering restore duration and integrity verification.