Help

A drill restores one of your database backups into a throwaway database that is destroyed afterwards, runs the assertions you configured, and produces a signed PDF proving whether the backup is actually restorable.

Go to Databases → Connect a database and point Dokaz at the bucket your backup job writes to — AWS S3, Cloudflare R2, Backblaze B2 or MinIO — with a read-only key, then click Test connection to see the backup a drill would use. You can also choose push, where your backup job uploads each dump to Dokaz with an API key (the database page shows the exact curl command). Every drill of your own backup restores it in an isolated, single-use sandbox that is destroyed afterwards; Dokaz never connects to your production database.

On the Drills page, pick a connected database and click Run drill. The step list updates live as the drill launches its sandbox, fetches and restores the backup, runs assertions, and writes the signed report with the measured RTO and RPO.

Every report is sealed with a detached cryptographic signature over its SHA-256 digest. The drill detail page re-verifies it on every view and shows whether it is still valid.

A check-in is a lightweight monitor for the backup job itself. Your job pings a unique URL each time it runs; if a ping doesn't arrive within the period and grace you set, Dokaz marks the monitor down and alerts you by email and webhook. Drills prove a backup restores — check-ins prove the job ran at all.

Go to Check-ins → New monitor and set how often you expect the job to run plus a grace window. Copy the ping URL and call it at the end of your backup script — e.g. add 'curl -fsS https://dokaz.net/ping/<token>' after a successful run. Send /fail instead to report a failure immediately, or /start to record that the job began.

Owners and admins manage members, databases, and drills; members can run drills and manage databases; viewers have read-only access across the account; execs read the same surface as viewers with the label matching their function; auditors read drills, evidence, targets, and check-in status but cannot see billing or the member roster. Invite teammates from the Account page.

From the Account page: Export downloads everything we hold as JSON; Delete account soft-deletes immediately and permanently erases all data after a 30-day grace period.