This is ensured by shipped backup ZFS snapshots every hour.
This is ensured by 3 cluster nodes with 3 redundant cold standby servers.