2 files changed, 8 insertions, 2 deletions
diff --git a/requirements/architecture/arch-v1.md b/requirements/architecture/arch-v1.md
index bf6e09b..1a620ac 100644
--- a/requirements/architecture/arch-v1.md
+++ b/requirements/architecture/arch-v1.md
@@ -31,6 +31,8 @@ Status: draft
 - The CRDT sync server must persist domain entities in an SQLite file (ard-006)
 - There must be a backups bucket, running on a separate machine to the CRDT sync
   server and the users' machines (ard-007)
+- There must be a documented process for recovering the server machine from a
+  backup after a failure (ard-007)
 - There must be a backup service, which makes regular backups of the CRDT sync
   server from the same machine, and stores the backups in the backups bucket
   over HTTPS (ard-007)
@@ -38,8 +40,6 @@ Status: draft
   service, the REST API, the SMS API and the Web GUI (ard-008)
 - There must be documented processes for installing, updating and operating the
   software on the server machine (ard-008)
-- There must be a documented process for recovering the server machine from a
-  backup after a failure
 - There must be a Web app server, which serves a Web GUI over HTTPS
 - The Web GUI must persist config and caches to Local Storage
 - There must be an SMS API
diff --git a/requirements/architecture/ard-007.md b/requirements/architecture/ard-007.md
index 0df0480..8eb9546 100644
--- a/requirements/architecture/ard-007.md
+++ b/requirements/architecture/ard-007.md
@@ -38,3 +38,9 @@ same machine as the SQLite file, and therefore the same machine as the CRDT sync
 server.
 
 HTTPS is an acceptable communications protocol. No alternatives were considered.
+
+## Consequences
+
+There must be a documented process for recovering the server machine from a
+backup after a failure: otherwise, the backups will be of no use in meeting the
+need for the data to be recoverable (req-067).