Business Continuity Program
Businesses of every size rely on Pixazo for functions that are critical to their operations, so the reliability of our platform, products, and services is central to the trust our customers place in us. This page explains Pixazo's business continuity plan and the wider business continuity management program that keeps our services available, and lets us recover quickly, when a disruption occurs.
What is Pixazo's business continuity program?
Pixazo's business continuity program is a formal, organization-wide effort to protect our people, our offerings, and the customers who depend on us, and to keep delivering our products and services during a disruption. The program is aligned with the ISO 22301 Business Continuity Management System.
We follow the ISO 22301 definition of business continuity: the capability of the business to continue the delivery of products and services at acceptable, predefined levels following a business disruption. Because our environment and our business keep evolving, maintaining that resilience is a continual effort rather than a one-time exercise.
Scope
The scope of the Pixazo business continuity program encompasses all customer-facing products and services, in addition to the internal processes and the teams supporting their delivery. We use a top-down approach: we start from the products and services we offer, then work back to the teams, functions, and resources that support them - spanning not just our platform, but also the systems, facilities, third-party relationships, and people that keep operations running. A dedicated Business Continuity and Disaster Recovery team, experienced in regulated frameworks and cloud service architecture, works with every business function to plan for potential and real crises.
Key components of the program
Our business continuity management takes a holistic view of risk - covering technology, systems, facilities, third parties, and people - rather than planning only for technical disruptions.
Risk assessment & BIA
Frequent risk assessments and an annual business impact analysis identify requirements, recovery objectives, and vulnerable points across facilities, technology, applications, data, processes, and the organization.
Recovery strategies & RTOs
Recovery strategies document current-state responses to the loss of a critical resource. Recovery Time Objectives (RTOs) are set from the predicted impact of a disruption, protecting our customer-facing SLAs.
Data backup & redundancy
Server clustering, network redundancy, and multiple AWS Availability Zones remove single points of failure, with regular database snapshots and point-in-time recovery to keep data safe and recoverable.
Incident response
A formal incident management process defines triggers and escalation criteria by severity and priority, covering diagnosis, escalation, investigation, resolution, and closure.
Roles & communication
A dedicated continuity team and a Business Continuity and IT Disaster Recovery Steering Committee own prioritization and tracking, and a crisis management plan convenes a core leadership team for decisions and communications.
Standards & assurance
The program abides by international standards - including ISO 27001 and ISO 22301 - so customers can rely on a consistent, audited approach to resilience and recovery.
How the program works
Our business continuity management follows a clear, repeatable lifecycle so risks are identified in time and every part of the business is considered.
Business impact analysis
We conduct an annual business impact analysis to understand business requirements, establish recovery objectives, and identify gaps and vulnerable points. Risks and threats identified are reported to the Business Continuity and IT Disaster Recovery Steering Committee for prioritization and tracked through a mitigation process.
Strategy analysis
Working with the Steering Committee and functional owners, we identify current-state recovery strategies in case an event takes place, and document where our capabilities can be improved and how.
Business continuity planning
A business continuity plan is developed for every in-scope team, which owns its plan and validates that it is usable, actionable, and precise. Plans use a resource-based approach focused on realistic, current-state strategies for the loss of a critical application, system, facility, third-party, or person.
Testing & review
Plans are reviewed, updated, and approved at least annually - or sooner on a significant organizational change. Programs and plans are tested annually through tabletop exercises, plan walkthroughs, and event simulations, with corrective actions and lessons learned documented and tracked.
Redundancy, recoverability & disaster recovery
To keep service availability high, Pixazo removes single points of failure and runs a fully redundant, distributed, and automated environment on AWS. Our Enhanced Disaster Recovery services add a further layer of protection on top of our standard continuity and recovery practices.
- Multi-AZ, redundant architectureServer clustering and a redundant mesh-edge network deliver resilient connectivity across multiple AWS Availability Zones, with multi-AZ RDS instances to minimize the impact of any event.
- Backups & point-in-time recoveryDaily database snapshots are maintained for 35 days with point-in-time recovery, and S3 bucket versioning helps prevent data loss from human or machine error.
- Dual-POD Enhanced Disaster RecoveryCustomers are assigned a primary and a secondary Performance Optimized Datacenter (POD) in different Availability Zones. The secondary POD holds a full application stack with dedicated redundant capacity and an automated volume backup taken twice a day and retained for six months, enabling seamless failover.
- Incident & crisis managementA formal incident management process handles diagnosis through closure, and a crisis management plan coordinates a global leadership response for decisions and communications when an incident affects Pixazo.
Relationship to security and ISO 22301
Business continuity and security are complementary. Our security controls reduce the likelihood of a disruption, while the business continuity program - aligned with ISO 22301 - defines how we keep services running and recover if a disruption still occurs. Pixazo holds ISO 27001 and ISO 22301, both recognized as gold standards for information security and business continuity planning.
You can review Pixazo's full security posture, controls, and compliance certifications - and download our ISO certificates - on our security page. ISO certificates are available free of charge and without an NDA.
Key takeaways
- Pixazo maintains a business continuity program to ensure continuous delivery of our services and products in the event of a business disruption.
- We prioritize our people, our solutions, and the customers that rely on us for the smooth functioning of their business.
- The program is aligned with the ISO 22301 Business Continuity Management System and backed by ISO 27001 certification.
Frequently asked questions
What is Pixazo's business continuity plan?
Pixazo's business continuity plan is a documented set of strategies and procedures that keeps our products and services available during a disruption. It sits inside a wider business continuity program aligned with the ISO 22301 Business Continuity Management System, and it covers all customer-facing products and services plus the internal processes and teams that support their delivery.
Is Pixazo's business continuity program certified to a standard?
Yes. Our business continuity program is aligned with ISO 22301, the international standard for business continuity management. Pixazo also holds ISO 27001 certification for information security, and both are treated as baseline requirements for how we plan, operate, and recover.
How does Pixazo protect and recover data?
Pixazo removes single points of failure using server clustering and network redundancy on AWS across multiple Availability Zones. Databases run as multi-AZ instances with daily snapshots retained for 35 days and point-in-time recovery. Enhanced Disaster Recovery adds a secondary Performance Optimized Datacenter in a separate Availability Zone with automated volume backups taken twice a day and retained for six months, plus S3 bucket versioning.
How often is the business continuity plan tested and reviewed?
Every in-scope team owns a business continuity plan that is reviewed, updated, and approved at least annually - or sooner when there is a significant change in the organization. The programs and plans are tested annually through tabletop exercises, plan walkthroughs, and event simulations, with corrective actions and lessons learned documented and tracked.
How does business continuity relate to Pixazo's security program?
Business continuity and security work together. Our security controls and certifications (including ISO 27001, SOC 2, PCI DSS, and GDPR) reduce the likelihood of disruption, while the business continuity program - aligned with ISO 22301 - defines how we keep services running and recover if a disruption still occurs. You can review our full security posture and download certifications on the Pixazo security page.