# Backup and Restore
Use hosting-panel or mysqldump database backups daily. Back up `config/database.php` securely and `public/uploads/` if organization branding/attachments are used. Test restoration on a staging sub-domain periodically. Never expose SQL backups under the public web root.