Choose an independent target
A backup stored only on the PBX host does not protect against host loss. Use encrypted S3-compatible storage, SFTP or managed RelayPBX retention.
Schedule and retain
Select a timezone-aware daily or weekly schedule and keep enough generations to cover silent configuration damage. Monitor both last-run and last-verified timestamps.
- Encrypt every bundle before it leaves the host.
- Retain the manifest and checksums with the bundle.
- Exclude secrets from logs, but include encrypted application secret material required for recovery.
Restore into a clean host
A restore drill must target a disposable clean installation. The platform verifies checksums, restores the database and files, applies compatible migrations and runs service checks without replacing the live system.