Skip to main content

Evidence for the services your business relies on.

Every recovery objective, evidenced against the frameworks that require it — and exported the moment someone asks.

Request early access

Application Object

One record per application.

Because Pillar discovers the service and reads its backup policies, it builds a single record of the application — its dependencies, its obligations, and the evidence that they are met. That record is what the business takes into an audit, or to a leader or an application owner who asks.

The Application record, read down like a form with its fields obscured. Four keywords each open a small list beside it. Dependencies: Active Directory, SQL Server, DNS. Owner: Dana Reyes, HR, Tier 1 critical, supported by HR Applications. SLA: 15 minute RTO, 15 minute RPO, quarterly DR testing, runbook yes. Compliance: SOX, PCI DSS, NIST.Application

The record

Evidence, per application.

Evidence

Payroll application

  • SOX
    Recovery within the stated objective
    ITGC
    Evidenced
  • GDPR
    Restore personal data in time
    Art. 32(1)(c)
    Evidenced
  • DORA
    Backup and restore, exercised
    Art. 12
    Evidenced
  • HIPAA
    Contingency plan tested
    §164.308(a)(7)
    Evidenced
  • ISO 22301
    Continuity exercised and evaluated
    Cl. 8.5
    Evidenced

Pillar supplies the evidence; the conclusion stays with your auditor. What it produces is infrastructure-scoped and supplemental to your organization’s audit evidence — a source of truth to cite, not an audit report.

Continuously

Recovery starts with the business.

“An RTO is a business requirement. It doesn’t actually become a capability until you’ve demonstrated it.”
Virtualization Review · “Cyber Resilience Expert: Backups Aren’t a Recovery Strategy Until You Prove They Work”

The business sees services.

Pillar

Recovers.

Request early access