Backup verification as a service

Your backups are untested until something restores them.

Dokaz restores Postgres backups into a throwaway database, proves the data really came back, and signs the result — so a broken backup shows up in a report, not an outage.

Postgres supported today · Drilling your own backups is in early access · The sample drill works for everyone today

dokaz.net/drills/a1f9c2

production-primary

Daily drill · pg_dump -Fc · 4.2 GB

passed

Restore time

2m 14s

Rows verified

4.2M

Assertions

6 / 6

Evidence

Signed

provisionfetchrestoreassertreportteardown

Built for the restore-test evidence requests in

SOC 2 A1.3 · ISO 27001 A.8.13 · HIPAA §164.308(a)(7) · Cyber-insurance renewals

How it works

A drill, start to finish

1

Try the sample drill

Sign up and run the built-in sample drill: a real pg_dump taken through the full pipeline. Drilling your own backups is in early access — email support@dokaz.net to join.

2

Dokaz runs the drill

Dokaz restores the dump into a throwaway database it creates for the drill, runs assertions — row counts, required tables, no-null checks — then drops it.

3

Collect signed evidence

Each drill produces an Ed25519-signed PDF and lands in your audit log. Anyone can verify the PDF offline with the open-source dokaz-verify tool.

New to backup drilling? Read the full explainer →

Auditor-grade evidence

Proof, not a green checkmark

A backup job that "succeeded" only tells you a file was written. Dokaz proves the file restores — and hands you a cryptographically signed report, kept for a seven-year retention window, with a live tamper-check.

  • An Ed25519-signed PDF for every drill, passed or failed
  • Verifiable offline with the open-source dokaz-verify tool
  • An append-only audit log of drills and downloads
  • Seven-year retention window, encrypted at rest
Dokaz
Verified

Backup Verification Report

database
production-primary
drill completed
2026-05-22 04:11 UTC
result
all 6 assertions passed
retain until
2033-05-22

Signature

ed25519:9f2c4b…a17b · valid

Capabilities

Built for teams that get audited

Scheduled drills

Verification runs on a cadence you set, so a broken backup is caught in days — not during a recovery.

A real assertion suite

Go past "it restored": assert row counts, table and column existence, non-null constraints, data freshness and read-only SQL checks on the restored data. Dokaz proposes checks from your restored schema; you choose which to keep.

Signed PDF evidence

Every drill's report is Ed25519-signed, kept for a seven-year retention window, and verifiable offline with the open-source dokaz-verify tool.

Append-only audit log

Drills, downloads, and account changes are recorded — the trail SOC 2 and ISO 27001 reviewers ask to see.

API and webhooks

A versioned JSON API and signed webhooks push drill results straight into your own tooling and alerts.

No production access

Dokaz verifies the backups you already have. It never needs a connection to your live database.

FAQ

Questions, answered

Does Dokaz need access to my production database? +

No. Dokaz only reads the backups you give it. It never connects to your live database.

How do I connect my own backups? +

Drilling your own backups is in early access and not yet open on this server. Today anyone can run the built-in sample drill and get a signed report in minutes. Email support@dokaz.net to join the early access.

Which databases are supported? +

PostgreSQL — pg_dump custom, tar and plain-SQL archives.

Where do drills run? +

On Dokaz's own infrastructure. A drill restores the dump into a throwaway database Dokaz creates for that drill, and the restored copy is dropped when the drill finishes. Drills never connect to your production database.

What do I actually get? +

A signed PDF report and an audit-log entry for every drill, kept for a seven-year retention window and verifiable offline with the open-source dokaz-verify tool — the restore-test evidence SOC 2 and ISO 27001 reviewers ask for.

What does it cost? +

Three self-serve tiers — Starter $100/mo, Growth $300/mo, Grounded $600/mo — all with daily drills, unlimited team seats, signed PDF evidence, and a 7-year evidence retention window. Tiers differ by database count, drills-per-day throughput, and where you sit in the drill queue. Cancel any time from Account → Billing. See the pricing page for the full breakdown.

Can I get drill results in my own tools? +

Yes. A versioned JSON API and signed webhooks push results straight into your alerting and dashboards.

Stop guessing about your backups

Run the sample drill in minutes and see a signed report. Free to start, no card required.