Disaster Recovery Overview

This Disaster Recovery Overview describes My Waypoint Technologies Inc.'s general approach to backup, data protection, infrastructure resilience, and recovery from significant system failures.

This is a high-level overview intended to provide transparency about our recovery philosophy. It is not a technical recovery runbook. Specific recovery procedures, recovery time objectives, recovery point objectives, backup schedules, and internal configurations are maintained internally and are not published.

My Waypoint Technologies Inc. approaches disaster recovery with the following principles:

• Protection of client data is the primary recovery priority
• Recovery efforts are proportionate to the nature and severity of the disruption
• Infrastructure resilience is built into service design where practical
• Backup practices support the ability to restore data and services after a failure
• Recovery capabilities are reviewed and improved over time

We do not publish specific recovery time or recovery point commitments unless explicitly stated in a written client agreement.

My Waypoint Technologies Inc. maintains backup practices for client-hosted content, databases, and configuration data. Our general backup approach includes:

• Regular backups of client-hosted website content and databases
• Storage of backups in a manner that supports recovery from infrastructure failures
• Retention of backups for a reasonable period to support recovery needs
• Access controls on backup storage to protect against unauthorized access

Specific backup frequency, retention periods, and storage configurations depend on the services contracted and the technology platforms involved. Clients with specific backup requirements are encouraged to discuss those requirements at the time of engagement.

During and after a recovery event, My Waypoint Technologies Inc. applies the following data protection principles:

• Client data is treated as confidential throughout the recovery process
• Access to backup data is restricted to authorized personnel
• Recovery activities are conducted in a manner consistent with our Privacy Policy and data governance practices
• Client data is not used for purposes beyond recovery and service restoration

See our Privacy Policy and Data Governance Statement for our broader data protection commitments.

My Waypoint Technologies Inc. uses Amazon Web Services (AWS) cloud infrastructure for hosting and application services. AWS infrastructure provides platform-level resilience features including:

• Multiple availability zones within AWS regions
• Geographic distribution options
• Platform-managed redundancy for core infrastructure services
• AWS-managed backup and recovery capabilities for certain services

The resilience characteristics of any specific client deployment depend on the architecture and services selected. AWS publishes its own resilience and availability commitments at aws.amazon.com/compliance/.

Most MyWaypoint products are delivered as static websites. Static architecture reduces recovery complexity — there is no server-side application to restore, and content can be redeployed from source control.

In the event of a significant failure, My Waypoint Technologies Inc. prioritizes recovery activities based on the following general principles:

• Client-facing services are prioritized over internal operational systems
• Services with active client dependencies are prioritized over inactive or development services
• Data integrity is prioritized over speed of recovery
• Client communication is initiated as early as practical during a recovery event

Specific recovery prioritization decisions will depend on the nature and scope of the disruption.

Recovery from certain types of failures may depend on the recovery capabilities of third-party service providers, including Amazon Web Services, Microsoft 365, and other vendors listed in our Vendor and Subprocessor Disclosure.

My Waypoint Technologies Inc. monitors service status from key providers and will communicate with affected clients when third-party disruptions affect our services.

We cannot guarantee recovery timelines that depend on third-party provider restoration activities.

During a significant recovery event, My Waypoint Technologies Inc. will make reasonable efforts to communicate with affected clients about the nature of the disruption, expected recovery timeline, and restoration progress.

Communication will be provided through available contact channels. For urgent service concerns during a disruption, contact: legal@mywaypoint.ca

See our Security Incident & Breach Notification statement for our approach to security incident communication.

My Waypoint Technologies Inc. reviews and improves its backup, recovery, and resilience practices as part of its broader security and governance activities.

Lessons learned from incidents, changes in infrastructure, and evolving client requirements may result in updates to recovery practices and configurations.

See our Business Continuity Overview for our broader approach to operational resilience.