Glossary
RPO (recovery point objective)
Also called: Recovery point objective
In one sentence
The maximum amount of recent work, measured in time, that you could lose in a disaster and still be OK.
Your recovery point objective answers the question: “If we have to restore from backup, how far back in time is acceptable?” If your backups run once a night, your RPO is effectively up to 24 hours — anything entered since last night’s backup could be gone. If you back up every hour, you’d lose at most an hour of work.
For a small practice or office, RPO is easy to make concrete. Picture losing every appointment booked, every chart note written and every invoice created since the last backup. For a medical office seeing 40 patients a day, losing a full day of clinical notes means re-creating records from memory and paper — a patient-safety issue, not just an inconvenience.
A shorter RPO means more frequent backups, and sometimes different technology. Cloud services like Microsoft 365 save changes continuously, so the main concern there is deletion or ransomware rather than lost edits; a local server running your practice database may need snapshots every 15 to 60 minutes. The backup storage calculator shows how frequency and retention affect the space you need.
Example: an accounting firm decides it can lose no more than one hour of work during tax season. Its file server takes hourly snapshots, copies them to the cloud overnight, and keeps an immutable copy that ransomware can’t alter. RPO works alongside RTO: RPO is how much data you lose, RTO is how long you’re down.
Related terms
- RTO (recovery time objective)The longest your business can afford to be without a system before the outage causes serious harm — your target for getting it back.
- 3-2-1 backup ruleKeep three copies of your data, on two different kinds of storage, with one copy kept off site.
- Immutable backupA backup copy that can’t be changed or deleted — by anyone, including an attacker with admin rights — until a set retention period ends.
- Disaster recovery (DR)The plan and tools for getting your systems and data back after a serious failure such as ransomware, a fire, a flood or a dead server.
- RansomwareRansomware is malicious software that locks or encrypts your files and systems, and often steals copies of your data, so criminals can demand payment to restore access or keep quiet.