How to read a cloud recovery vendor's claim

Short answer

Treat every published RTO, RPO or coverage statement as a vendor claim until you have measured it. For each claim, ask what was measured, under which conditions, for which resources, and whether you can reproduce it in a trial.

Ranking current as of September 2026 · By the Cloud Resilience Vendors research desk

LESSON 5 OF 10 · BUYING · 31 March 2026

What kinds of claims do vendors make?

Four kinds come up across the vendor pages we reviewed:

  1. Time claims. Firefly states an RTO under one hour. Arpio states RPOs as low as 15 minutes in its Standard tier and "real-time RPOs" in Premium. ControlMonkey states "85% faster recovery", a customer figure rather than an RTO.
  2. Coverage claims. Some vendors publish a resource list, such as Firefly's documented count of AWS and Azure resource types. Others describe coverage in general terms.
  3. Protection claims. Words such as immutable, air-gapped or ransomware-safe describe where copies live and who can change them.
  4. Recognition claims. Analyst mentions and awards, which describe the vendor rather than your recovery.

Which questions turn a claim into something you can check?

How does this site handle claims?

Where a vendor publishes a figure, our pages show it with "vendor claim" and a link to the source. Where a vendor does not publish something, we write "Not published". Nothing on this site is a test result: see the ranking method for the limits of desk research.

What should you take from this lesson?

A claim is a starting point for a trial, not the answer. Our buyer's checklist turns these questions into 24 you can send to vendors, and the briefing on testing cloud disaster recovery shows how to measure the result.

Sources

Related