# Ensure automated daily backups are enabled and retained

- Source: https://support.icompaas.com/support/solutions/articles/a_1790103904176667-ensure-automated-daily-backups-are-enabled-and-retained
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Supabase cloud](https://support.icompaas.com/support/solutions/c_1790103054038308) › [supabase checks](https://support.icompaas.com/support/solutions/folders/f_1790103067540538)
- Last updated: 2026-09-22
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description**

Ensure production projects run on a plan that includes automated daily backups (Pro, Team, or Enterprise), and that the backup retention period meets the organization's recovery requirements. Recent backups should appear in the dashboard, and restores should be tested periodically.

**Rationale**

Backups are the last line of defense against data loss from accidental deletion, bad migrations, or attacks. Projects on the Free plan cannot access dashboard backups, so data may be unrecoverable after an incident. Checking that daily backups exist and are kept long enough makes sure the project can actually be restored when needed.

**Impact**

-   Allows the database to be restored after data loss
    
-   Retention depends on the plan (7, 14, or up to 30 days)
    
-   Storage objects are not included in database backups
    

**Default Value**

Pro plan projects keep daily backups for 7 days, Team for 14 days, and Enterprise for up to 30 days. Free plan backups cannot be downloaded, and Supabase recommends Free projects export their own backups with the CLI.

**Pre-Requisites**

-   Organization Owner role for plan changes
    
-   Pro, Team, or Enterprise plan
    
-   Agreed backup retention requirements
    

**Test Plan**

1.  Sign in to the Supabase Dashboard at [https://supabase.com/dashboard](https://supabase.com/dashboard).
    
2.  Select your project.
    
3.  Open Database in the sidebar and select Backups.
    
4.  On the Scheduled backups tab, verify that recent daily backups are listed.
    
5.  Confirm that the retention period meets your requirements.
    
6.  If no backups are listed or retention is too short, follow the implementation steps.
    

**Implementation Steps**

1.  Sign in to the Supabase Dashboard at [https://supabase.com/dashboard](https://supabase.com/dashboard).
    
2.  Select your organization.
    
3.  Open Organization Settings and select Billing.
    
4.  Upgrade to a plan whose backup retention meets your requirements.
    
5.  After a day, confirm that backups appear under Database > Backups > Scheduled backups.
    
6.  For longer retention, also export backups with the Supabase CLI db dump command and store them off-site.
    

**Backout Plan**

1.  Sign in to the Supabase Dashboard at [https://supabase.com/dashboard](https://supabase.com/dashboard).
    
2.  Select your organization.
    
3.  Open Organization Settings and select Billing, and change back to the previous plan.
    

**Reference**

-   [https://supabase.com/docs/guides/platform/backups](https://supabase.com/docs/guides/platform/backups)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.