Data Ops
Advanced
Data Ops skill is available on the Advanced plan. See Pricing.
Database posture, backup compliance, data residency, and access controls — for the data tier specifically.
What Data Ops in Escher covers
| Capability | Example question |
|---|---|
| Backup compliance | "Which production databases lack a recent backup?" |
| Data residency | "Is any EU customer data stored outside the EU?" |
| Encryption posture | "Which databases are unencrypted at rest?" |
| Access controls | "Who has direct DB access in production?" |
| Configuration drift | "Which RDS instances drifted from our standard parameter group?" |
| Capacity / cost | "Which databases are oversized?" |
Sample answers
"Find every production database without point-in-time recovery enabled."
Returns the list, ranked by data sensitivity, with one-click remediation per item.
"Is any HIPAA-scoped data outside our designated regions?"
Returns a residency report: storage locations, replication targets, backup destinations — flagged against your declared scope.
"Which databases have non-standard encryption keys?"
Returns an encryption inventory: which databases use AWS-managed keys, which use customer-managed keys, which are unencrypted, with compliance implications.
Why Data Ops is its own skill
Database posture is high-stakes and often overlooked:
- A single unencrypted prod database can fail a SOC 2 audit
- A backup that didn't run is invisible until you need it
- A residency violation is a regulatory event
Escher treats Data Ops as a first-class skill specifically because mistakes here are expensive.