Before your first live invoice, name the person who can recover the installation. A working login and a recent backup are useful, but neither proves that person can restore the database, stored documents and configuration when the server fails.
Pepper runs on your hosting. You can do the work yourself or hire a developer or hosting provider. The product purchase does not include server administration.
Give each job an owner
| Job | What that person checks |
|---|---|
| Hosting | Supported PHP and database, HTTPS, storage capacity and access |
| Scheduled work | Cron runs and due recurring invoices and reminders receive attention |
| Provider credentials, recipients and delivery failures | |
| Backups | Database and stored files have usable copies outside the live server |
| Updates | A compatible release works with the installation and any modifications |
| Recovery | The restore procedure works on a separate installation |
One person can own several jobs. The useful part is a clear handover: who has access, where the procedure lives and who can cover an absence.
Prove recovery with a separate copy
Follow the backup and restore manual. Restore into an isolated environment and check a sample invoice's issued original, an attached purchase receipt and the expected records. Keep that environment from sending customer email or running live billing schedules.
Use real checks against a sample you know. “The backup file downloaded” says less than “the restored purchase opens with its receipt”. The test should confirm that the records and files belong to the same recoverable installation.
The backup commands have server requirements, including process execution and a supported database dump tool. Confirm that your host allows them before relying on the built-in procedure.
Treat delivery failures as operating work
An invoice can issue while its email fails. Read the delivery result on the existing record before trying again. Mail-server acceptance does not establish inbox delivery, and an unknown result needs review before a resend.
A cron interruption can leave recurring occurrences waiting. Review the schedule's next date and generated invoices after recovery. Catch-up behavior matters more than the presence of a green hosting status page.
Budget for updates and custom code
Pepper includes the first year of updates. Download access renews automatically at $199/year. Cancel to stop future charges; the perpetual licence continues after download access ends. Keeping an installation supported and maintained still takes work, including the PHP and database services around the application.
Test updates on a separate copy and preserve a recovery path. Modified files need a managed merge because the built-in updater refuses them. Six months of product support does not cover your custom code or hosting operation, and buying another year of updates does not extend that support period.
Use the installation requirements, update procedure and support scope when agreeing a maintenance service.