Skip to main content

​
Overview

SDKs evaluate flags locally and keep their last good snapshot when refresh or streaming fails. Flag changes publish automatically, with retries for failed publication. See Local evaluation for startup defaults and outage behavior.

​
Backups and restore

The standard database backup target is one encrypted off-site dump every 24 hours with 35-day retention, plus a daily automated restore verification. Shipd manages database recovery and republication of flag configuration. These are engineering targets, not a contractual SLA; ask support for the latest drill evidence and your contracted RPO/RTO. Extended retention and point-in-time recovery are not generally available.

​
Incidents and rollback

During an incident, check the service status/support channel, stop repeated writes, preserve request and approval ids, and keep SDKs on their last good snapshot. Flag rollback is a new audited change: revert the config, run shipd diff, then shipd push; an approval policy may queue it. Platform rollback and restore are operator actions. Never bypass an approval or force a conflict unless your incident procedure authorizes it.

​
Operator access

Customer organization access is role-controlled and audited. Infrastructure access is limited to authorized operators through provider controls; it is not a hidden product role. Support cannot ask for your management, SDK, service-account, SCIM, SSO, storage, or encryption secrets.

​
Data deletion

Archiving a flag or environment is not immediate physical deletion. Removing a SCIM user removes organization membership, not a global account used by other organizations. Audit rows intentionally survive organization deletion and expire under the effective retention policy. Backup copies age out under their lifecycle after primary deletion. Broad account/organization export and complete erasure currently require operator coordination. Contact support and identify the organization and subject without sending secrets. See Access control, Audit log, and Isolation tiers.