Stack: Financial services
Okta disaster recovery for financial-services compliance leaders
A financial-services compliance posture assumes the identity layer is correct and recoverable. SOX general IT controls test change management on access-controlling systems. PCI DSS Requirement 7 expects need-to-know enforcement. NYDFS Part 500 expects documented access controls and incident-response readiness. The Okta tenant is in scope for every one of them — and the recovery story has to be documented and provable, not theoretical.
Butterfly captures point-in-time, encrypted snapshots of every Okta resource. The Audit Pack PDF is framework-filterable to SOC 2, PCI DSS, NIST 800-53, ISO 27001, HIPAA, and CIS Controls — and includes a SHA-256 manifest for tamper-evident handling. The Restore Readiness Score is a continuous 0-to-100 number you bring to the board.
What you get
How Butterfly fits Financial services
Framework-filterable Audit Pack PDF
Pick the framework — SOC 2, PCI DSS, NIST 800-53, ISO 27001 — and the Audit Pack surfaces only the relevant sections. Hand it to your auditor with no translation step.
Restore Readiness Score per connection
A continuous 0-to-100 score per Okta connection. Auditors stop asking 'is your backup good?' because the score answers it.
Tamper-evident audit chain
Every Audit Pack PDF includes a SHA-256 manifest. Chain-of-custody is preserved by hash, not by trust.
What goes wrong
Three incidents you have already seen variations of
Treasury-operator policy locks BSA officers mid-day
A new IP-restriction policy rolled out broadly instead of to a single application group. BSA officers could not file required transaction reports. Restore preview surfaces the policy scope and reverts at the right grain.
SOX GITC audit asks for change history on the identity layer
An audit cycle asks for point-in-time evidence of who-had-what-access over the past quarter. Butterfly's diff view supplies it. The Audit Pack PDF packages it.
Compromised admin softens MFA on a high-privilege group
An admin credential was phished. Before detection, the attacker softened MFA requirements on an authentication policy applied to a privileged group. Restore preview surfaces the change against the prior snapshot.
Honest scope
What Butterfly captures — and what it does not
In scope
Every Okta resource type your financial-services controls depend on: users, groups, group rules, applications, sign-on policies, authentication policies, identity providers, authorization servers, network zones, behaviors, event hooks, inline hooks, and Workflows automations.
Out of scope
We do not back up the downstream financial systems (treasury, payments, ledger, core banking) themselves. We back up the Okta layer that governs access to them.
Plans
Free, Standard, or Business
Free
$0 / forever
- 1 Okta connection
- 7-day retention
- 1 total backup
- No credit card
Standard
$1 / user / month — $99 minimum
- 2 Okta connections
- 90-day retention
- Restore preview + dry-run
- Audit Pack PDF (framework-filterable)
Business
$2 / user / month — $299 minimum
- Unlimited Okta connections
- Unlimited retention
- Continuity (warm standby)
- Priority restore support
Pricing reference: /upgrade. Provider coverage today: Okta, Okta Workflows, Auth0.
Regulatory shape
Compliance and audit angle
SOC 2 Type II, PCI DSS v4, NYDFS Part 500, GLBA Safeguards Rule, NIST 800-53 (for federally-regulated counterparties), and SOX general IT controls all expect the identity layer protecting money movement and customer data to be both restricted and demonstrably restorable.
Butterfly's own SOC 2 Type II work is in progress; current status lives in the Trust Center.
Frequently asked
FAQ
Is the Audit Pack PCI-filterable?
Yes. Filter to PCI DSS v4 at export time and the Audit Pack surfaces only the PCI-relevant sections.
How does Butterfly fit a SOX GITC narrative?
Point-in-time snapshots, diff history, and Audit Pack PDFs supply the change-management evidence SOX GITC testing asks for.
Is Butterfly itself PCI Level 1?
Butterfly handles Okta configuration data only — no cardholder data passes through Butterfly. The Trust Center documents data flow for QSA review.
Recover your Okta org in minutes, not hours
Talk to Mick (the founder) for a 30-minute demo, or start the free trial. No credit card for the free tier.
More stacks
Okta DR for other stacks
Trust posture, subprocessors, and security details: Trust Center.