Backup verification as a service

Your backups are untested until something restores them.

Dokaz restores your Postgres backups into a throwaway database on a schedule, proves the data really came back, and signs the result — so a broken backup shows up in a report, not an outage.

Daily drills on every paid tier · Cancel anytime · Postgres supported today · Early access: we set up your backup source with you

dokaz.net/drills/a1f9c2

production-primary

Daily drill · pg_dump -Fc · 4.2 GB

passed

Restore time

2m 14s

Rows verified

4.2M

Assertions

6 / 6

Evidence

Signed

provisionfetchrestoreassertreportteardown

Built for the restore-test evidence requests in

SOC 2 A1.3 · ISO 27001 A.8.13 · HIPAA §164.308(a)(7) · Cyber-insurance renewals

How it works

A drill, start to finish

1

Set up your backup source with us

During early access we connect your backups with you: a concierge setup of a synced source for the pg_dump your backup job already writes. Self-serve S3/R2 pull is coming. Dokaz never connects to your production database.

2

Dokaz runs the drill

On your schedule Dokaz restores the dump into a throwaway database it creates for the drill, runs your assertions — row counts, required tables, no-null checks — then drops it.

3

Collect signed evidence

Each successful drill produces a signed PDF, and every drill lands in your audit log — the proof auditors and customers ask to see.

New to backup drilling? Read the full explainer →

Auditor-grade evidence

Proof, not a green checkmark

A backup job that "succeeded" only tells you a file was written. Dokaz proves the file restores — and hands you a cryptographically signed report, kept for a seven-year retention window, with a live tamper-check.

  • An Ed25519-signed PDF for every successful drill
  • An append-only audit log of drills and downloads
  • Seven-year retention window, encrypted at rest
Dokaz
Verified

Backup Verification Report

database
production-primary
drill completed
2026-05-22 04:11 UTC
result
all 6 assertions passed
retain until
2033-05-22

Signature

ed25519:9f2c4b…a17b · valid

Capabilities

Built for teams that get audited

Scheduled drills

Verification runs on a cadence you set, so a broken backup is caught in days — not during a recovery.

A real assertion suite

Go past "it restored": assert row counts, table and column existence, and non-null constraints on the restored data.

Signed PDF evidence

Each successful drill's report is cryptographically signed, kept for a seven-year retention window, and verifiable with a live tamper-check.

Append-only audit log

Drills, downloads, and account changes are recorded — the trail SOC 2 and ISO 27001 reviewers ask to see.

API and webhooks

A versioned JSON API and signed webhooks push drill results straight into your own tooling and alerts.

No production access

Dokaz verifies the dumps you already have. It never needs a connection to your live database.

FAQ

Questions, answered

Does Dokaz need access to my production database? +

No. Dokaz only reads the backup dumps set up for your account. It never connects to your live database.

How do I connect my own backups? +

During early access, connecting your backup source is a concierge setup: we set up a synced source for your pg_dump output with you, then you register it and add assertions in the app. Self-serve pull from S3 and Cloudflare R2 is coming. Until then, anyone can run the built-in sample drill and get a signed report in minutes. Email support@dokaz.net to get set up.

Which databases are supported? +

PostgreSQL today — every pg_dump format: plain, custom, tar, and directory archives. MySQL and MongoDB are on the roadmap.

Where do drills run? +

On Dokaz's own infrastructure. Each drill restores your dump into a throwaway database Dokaz creates for that drill, and the restored copy is dropped when the drill finishes. Drills never connect to your production database.

What do I actually get? +

A signed PDF report for each successful drill and an audit-log entry for every drill, kept for a seven-year retention window — the restore-test evidence SOC 2 and ISO 27001 reviewers ask for.

What does it cost? +

Three self-serve tiers — Starter $100/mo, Growth $300/mo, Grounded $600/mo — all with daily drills, unlimited team seats, signed PDF evidence, and a 7-year evidence retention window. Tiers differ by database count, drills-per-day throughput, and where you sit in the drill queue. Cancel any time from Account → Billing. See the pricing page for the full breakdown.

Can I get drill results in my own tools? +

Yes. A versioned JSON API and signed webhooks push results straight into your alerting and dashboards.

Stop guessing about your backups

Run the sample drill in minutes and see a signed report. Free to start, no card required.