S3 versioning: All data buckets use versioning. Deleted or overwritten objects can be restored from the version history. Non-current versions expire after 5 days.

CloudTrail: All S3 data access is logged. Log file validation is enabled to detect tampering. CloudTrail logs are KMS-encrypted and stored in a dedicated S3 bucket with versioning and MFA delete.

Database: Aurora PostgreSQL offers automated backups with a 30-day retention period. A database snapshot is automatically created before every production deployment.

DynamoDB: Point-in-time recovery is enabled on all tables, with continuous backups.

Pipeline integrity: Document processing goes through defined stages with manual review gates. All workers are idempotent.