Splunk SOAR (Cloud) deployments are backed up every 24 hours. Each backup is a snapshot of both the deployment file system and PostgreSQL database.

• Backups of the PostgreSQL database are retained for 35 days.
• Backups up the file system are retained for 28 days.

Authorized Splunk SOAR (Cloud) users can open a support case to have a backup restored. See Splunk Support portal in Administer Splunk SOAR (Cloud).