Policies
Disaster recovery plan
How D2GO keeps its hosted services, including Driver Challenge, running through an incident, and recovers them as quickly and completely as possible.
Emergency contact
Send any emergency request to [email protected]. Our systems are monitored 24 hours a day, 7 days a week.
Where our services run
All D2GO services run on Google Cloud, in the Montréal region (northamerica-northeast1). Google's data centres are built to withstand many traditional disaster risks such as fire, flood or power loss, and its infrastructure lets us restore service quickly if a component fails.
We keep the data we need to restore service to a minimum: most of what Driver Challenge stores can be rebuilt from our customers' Geotab databases after a failure.
Backups
Every critical service is backed up at least nightly, in a separate location. Backups are verified, recovery is tested regularly, and approved staff can reach them at all times. Critical services are:
- the data synchronization services;
- the add-ins and web resources;
- the configuration database;
- the database of synchronized customer data;
- the back-end services and API.
What triggers this plan
- loss of connectivity or power in our cloud region;
- a targeted or distributed attack on our services;
- loss or corruption of data;
- any other event that interrupts a critical service.
Emergency Response Team
The Emergency Response Team (ERT) is notified of any incident. Depending on its impact and severity, the ERT:
- responds immediately to a potential disaster;
- assesses its extent and its impact on our services;
- decides which parts of this plan to activate;
- assembles and leads the Disaster Recovery Team to keep vital services running and return to normal;
- makes sure every employee is informed and knows their role;
- decides on the timing, content and audience of notifications to customers and the public.
Disaster Recovery Team
The ERT assembles the Disaster Recovery Team (DRT) from the on-call staff it needs. The DRT's objectives:
| Within | Objective |
|---|---|
| 2 hours | Set up the facilities and services needed for recovery |
| 8 hours | Restore key services |
| 24 hours | Return to normal service |
Along the way, the DRT coordinates its members' work, notifies affected customers and reports to the ERT.
After an incident
Management and the ERT review every serious incident: what happened, its legal implications, including breach notification obligations under the laws that apply such as Québec's Law 25, and its financial impact. What we learn goes back into this plan.
Exercises
We rehearse this plan. In an exercise no one passes or fails: everyone learns what needs to improve and how. Rehearsing makes sure each team knows its role and can act with confidence, and simulating real conditions shows whether the plan works as written.