Rubrik protects Cloud SQL PostgreSQL instances entirely through the native GCP Admin API with no agents, sidecars, or Rubrik infrastructure in the data path, keeping all database content inside your GCP environment.

SLA Domain Policies automate the full protection lifecycle: scheduled and on-demand backups, parallel pg_dump archival to your GCS bucket with optional Retention Lock, and four recovery pathways including cross-region and cross-project export.

Security is enforced at every layer with TLS on all network paths, Workload Identity Federation for keyless auth, CMEK inheritance on temporary instances, and Quorum Authorization for high-impact operations.