Business continuity plan

Training programmes rely on adept to keep running. This page sets out, at a summary level, how we keep the service available, how your data is protected and backed up, and what happens to your data if something goes wrong - or if you ever decide to leave.

1. Your data is yours

Your programme's data belongs to you, not to us. There is no long-term lock-in: you can ask for a full export of your programme's data, in a standard portable format, at any time, and we will provide it within 3 working days of request. Individual users can already download a copy of their own personal data from their profile in the app, as described in our privacy notice.

2. Backups and data resilience

Data is encrypted in transit and at rest. The production database has delete-protection and point-in-time recovery enabled, allowing us to restore to a recent point in time in the event of accidental deletion or corruption, and backups are taken daily and retained on a rolling 7-day basis.

3. Infrastructure

adept runs on Google Cloud / Firebase infrastructure, with our application database held in the European Union (Belgium and the Netherlands) and server functions and uploaded files in the United Kingdom (London). Google Cloud regions are built from multiple physically separate zones, so the service does not depend on a single data centre.

4. Recovery objectives

In the event of a major service disruption, we aim to restore the service within a Recovery Time Objective (RTO) of 24 hours, with a Recovery Point Objective (RPO) - the maximum data loss window - of up to 24 hours, matching our daily backup cycle. These targets are reviewed as the platform and its user base grow.

5. Incident response and communication

We monitor the service for disruption and security events. If a personal data breach occurs that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it, and will notify affected users without undue delay, in line with UK GDPR. For operational incidents affecting availability, we will update affected programme administrators directly.

6. If adept were unable to continue operating

Should Adept Training Platforms Ltd ever be unable to continue operating the service, we are committed to giving programmes reasonable advance notice, providing a full export of your data before any wind-down, and supporting a smooth transition to an alternative arrangement.

7. Review

This plan is reviewed at least annually and after any significant change to our infrastructure. Questions about our approach to continuity: support@adept-platforms.com.