Skip to content
compliancebase

Recovery point objective (RPO)

The target maximum amount of data loss measured backward in time after disruption.

In practice

RPO limits acceptable data loss — often expressed as backup frequency or replication lag. A one-hour RPO implies hourly snapshots or continuous replication; document the actual achievable RPO from restore tests, not vendor marketing defaults.

Common confusion

RPO concerns data loss; RTO concerns restoration time.

Related controls

Framework versions referenced in this page:

Last verified: August 2026 · Primary sources linked above