Where the service runs, how it is hardened, and how we maintain availability.
Production runs in UK and EU regions on tier-1 cloud providers with private networking and least-privilege access.
RPO 1h, RTO 4h, restore tested quarterly.