Home / Guides & docs

Guides & docs

Everything on single-tenant recovery in pooled Postgres — the concepts, the job types, and the reference for the CLI and control-plane API.

Guides

Restore a single tenant from Postgres

Recover one customer's rows and files from a pooled database without rolling back everyone else — mapping the tenant graph, diffing, and merging back safely.

Prove you deleted one tenant's data

Provable erasure for GDPR and audits: blast-radius counts, object-storage cleanup, and signed evidence that the deletion was complete and contained.

Export or migrate one tenant

Offboarding, pooled-to-dedicated migration, and data-portability requests — lift one tenant out cleanly, files included.

Run a tenant recovery drill

DR testing for multi-tenant SaaS: rehearse single-customer recovery read-only and end with signed proof it works.

Single-tenant restore vs pg_dump vs PITR

What each Postgres recovery tool does, where each stops, and what fills the gap when you need just one customer.

Reference

pg_tenantundo CLI reference

Every flag for the standalone recovery CLI: classify, preflight, report, extract, diff, plan, execute, and provable erase.

Control-plane API reference

Auth, role-based capabilities, the jobs lifecycle, plan-hash approval, evidence, audit, and provisioning endpoints.

Security & data handling

The outbound-only runner, metadata-only wire protocol, no stored DB credentials, RBAC, audit, and signed evidence.