A single point of failure isn't a good way to protect people's personal data that you have, but even small teams are unlikely to have a single golden source of

A single point of failure isn't a good way to protect people's personal data that you have, but even small teams are unlikely to have a single golden source of data. Data tends to flow from one system into another. For example: If someone sends you an email asking to be deleted, why would you store that email in the DB and nowhere else? Your team would read the email then update the database. After a crash, if you then restored a backup, why wouldn't you be able to review your last days email (since the last backup) for any updates? Of course you would. Even small teams could.