---
last_verified: 2026-03-16
pattern:
  id: service-tiering
  name: "Database Service Tiering Model"
  category: operations
---

description: >
  Maps customer workloads to standardized service tiers based on business
  criticality, availability requirements, and compliance needs. Each tier
  defines the HA/DR topology, support model, backup strategy, and operational
  responsibilities. Derived from Oracle's ECAL transformational framework.

tiers:

  platinum:
    label: "Platinum"
    description: "Mission-critical, zero tolerance for downtime"
    example_workloads: ["Core banking", "Payment processing", "Trading systems", "Telco network"]
    sla:
      uptime: "99.999%"
      rto: "0 (near-zero with TAC + RAC)"
      rpo: "0 (synchronous replication)"
      planned_downtime: "0 (even for upgrades — edition-based redefinition)"
      support: "24x7, 10 min response"
    architecture:
      ha: "RAC (multi-node) + TAC/AC"
      dr: "Synchronous ADG + GoldenGate active-active (optional)"
      backup: "ZDLRA or Autonomous Recovery Service, continuous"
      isolation: "Full physical isolation — dedicated CDB, dedicated infrastructure"
      encryption: "TDE + DB Vault + Key Vault + SQL*Net encryption"
    oci_mapping:
      primary: "ExaCS or ADB-D (for RAC + full control)"
      alternative: "ADB-S only if application is TAC-compatible and RPO=0 is met by local ADG"
    cost_impact: "Highest — dedicated infra, dual-site, 24x7 support"

  gold:
    label: "Gold"
    description: "Business-critical, tolerable brief outage"
    example_workloads: ["CRM", "ERP", "eCommerce", "Risk analytics"]
    sla:
      uptime: "99.99%"
      rto: "1-4 hours"
      rpo: "5-15 minutes"
      planned_downtime: "4x 4hr/year maintenance windows"
      support: "24x7, 4 hour response"
    architecture:
      ha: "TAC + local ADG (auto-failover)"
      dr: "Asynchronous cross-region ADG"
      backup: "Autonomous Recovery Service, incremental forever"
      isolation: "Dedicated CDB (dedicated home), instance caged (not oversubscribed)"
      encryption: "TDE + Key Vault"
    oci_mapping:
      primary: "ADB-S Serverless (with TAC + ADG)"
      alternative: "ExaCS if RAC explicitly needed or >128 OCPU sustained"
    cost_impact: "High — primary + standby OCPU cost, cross-region DR"

  silver:
    label: "Silver"
    description: "Important but recoverable from backup"
    example_workloads: ["HR systems", "Financials", "Internal portals", "Reporting"]
    sla:
      uptime: "99.5%"
      rto: "1 day"
      rpo: "1 day"
      planned_downtime: "4x 4hr/year maintenance windows"
      support: "24x7, 8 hour response"
    architecture:
      ha: "Single instance or RAC optional"
      dr: "Offsite backup only — no real-time replication"
      backup: "Automated daily backup, 30-day retention"
      isolation: "Shared CDB (shared binaries) acceptable"
      encryption: "TDE recommended, DB Vault optional"
    oci_mapping:
      primary: "ADB-S Serverless (no ADG needed)"
      alternative: "Base DB Service for legacy compatibility"
    cost_impact: "Medium — no standby cost, shared infrastructure"

  bronze:
    label: "Bronze"
    description: "Non-critical, best-effort recovery"
    example_workloads: ["Dev/Test", "Room booking", "Internal tools", "Sandbox"]
    sla:
      uptime: "98%"
      rto: "Best effort"
      rpo: "Best effort"
      planned_downtime: "Flexible"
      support: "Business hours, 2 day response"
    architecture:
      ha: "None — single instance"
      dr: "Database export or backup to Object Storage"
      backup: "Weekly backup, 7-day retention"
      isolation: "Shared CDB, oversubscribed OK"
      encryption: "TDE optional"
    oci_mapping:
      primary: "ADB-S Serverless (minimum OCPU, auto-scaling off)"
      alternative: "VM DB Standard Edition for cost"
    cost_impact: "Lowest — minimal resources, no redundancy"

auto_assignment_rules:
  - "If customer says '99.99%' or 'zero downtime' → Platinum or Gold (ask which)"
  - "If customer says 'PCI' or 'banking regulations' → minimum Gold"
  - "If workload type is 'dev/test' → Bronze unless explicitly stated otherwise"
  - "If customer says 'reporting' or 'read-only' → Silver unless SLA says otherwise"
  - "If no SLA stated → assign Silver and flag for confirmation"
