A business states that a payment service must recover within 90 minutes with at most five minutes of lost data. Which evidence is strongest?

1. A larger archive retention period alone
2. A backup schedule showing one daily backup without restore results
3. A recovery test meeting the RTO and RPO with validated business transactions
4. A supplier's general marketing claim of high reliability