Availability at Docker

Yes. Docker has a documented Business Continuity Plan (BCP) or Disaster Recovery (DR) Plan that is tested annually. Our Governance, Risk & Compliance (GRC) team is responsible for maintaining and updating these plans on an annual basis at a minimum.

Docker’s BCP and DR Plans are not shared externally. But TOCs and a plan summary of Docker’s BCP/DR approach is available on our Whistic profile. Customers can access Whistic by submitting a documentation request.

We make relevant providers aware that we’re performing testing, that way they’re available to support. However, these providers aren’t actively involved.

Yes. Docker has event alerting for all production systems. Our team monitors storage capacity, resource utilization, and system performance for continued availability. Docker’s SIEM receives security audit logs in real-time or near real-time. And we investigate and remediate any unusual and unauthorized events.

Docker has a documented Backup Policy and performs full daily backups. Our team also uses tools provided by the cloud hosting provider to automatically back up production data.

Yes. Docker storage backups are encrypted and can only be accessed by the infrastructure team.

Yes. Docker logically separates its customer data. Each customer has its own organization, teams, and public/private repositories.