A backup you've never restored is a hope.

Firedrill restores every backup on real infrastructure, verifies the data, and sends you the proof.

Works with Supabase, Neon, Railway, and any Postgres. Read-only access only.

The auditor question

SOC 2 asks two things about backups: are they off-site, and are they tested?

Firedrill answers both — automatically. Off-site encrypted storage, and a restore drill on real infrastructure with evidence per backup.

How a drill works

When did you last run a fire drill on your database? Firedrill runs one on every backup.

1

Backup

pg_dump streams from your database through a read-only role. We can't write to your data — ever.

2

Encrypt & store off-site

AES-256-GCM with a per-project key, before a single byte leaves the pipeline. Stored on independent infrastructure.

3

Restore to a real instance

Every backup is restored onto a fresh, ephemeral Postgres — same major version as yours. Not a checksum. An actual restore.

4

7 integrity checks

Restore exit, schema hash, table presence, row counts, index integrity (amcheck), sample queries, recovery time.

5

Drill report

Per-check evidence, appended to an immutable record. Forward it to your auditor unedited.

This is a drill report.

Every backup gets one. Evidence, not vibes.

production-db · backup 2026-07-04 02:00 UTCDRILL PASSED
restore_exitpg_restore completed cleanly
schema_hashsha256 matches source exactly
table_presence142 / 142 tables present
row_counts142 tables within tolerance
amcheck38 btree indexes valid
sample_queries10 / 10 tables readable
durationrecovery time 94.2s — measured, not guessed

This restore was performed on real infrastructure by Firedrill on 2026-07-04. Verification ID 3f9c2e1a.

Know your real recovery time before you need it.

Every drill measures how long the restore actually took, on real hardware, with your real data. Ours is measured, not guessed — and you'll see the trend as your database grows.

last drill: passed · recovery time 4m 12s

Point us at any pg_dump file.

Get a drill report in minutes. No signup for your database required — it works on backups made by Supabase, SimpleBackups, or your own cron job.

Run a free drill →