Trinetra runs controlled failures, measures your actual RTO and RPO, and stores cryptographically signed evidence for DORA, RBI CSF, ISO 22301, SOC 2, and PCI DSS.
Most companies run a DR drill once a year, write it up in a spreadsheet, and hope nothing changed since then.
Not the SLA commitment — the last time someone measured it against a real failure.
"We have backups" is not an RPO. Did any data survive the last pod restart?
The PASS from Q1 — earned against the same configuration that's running today?
Each test produces a signed evidence report stored in your own GCS, S3, or Azure Blob bucket.
Deletes one instance, watches replacement by UID. Measures time to first ready pod and data recovery.
Scales deployment to zero and back. Measures full outage period and time to restore service.
Cordons all nodes in a zone, evicts pods, watches workload recover in surviving zones.
Terminates one instance in a managed group. Group holds target size and replaces automatically.
Cloud SQL, RDS, or Azure SQL HA failover. Records zone before/after as proof of actual failover.
Evidence is stored in your own cloud storage — GCS, S3, or Azure Blob. You own it. We cannot access it. It cannot be altered after the fact.
LNP Technologies
{
"runId": "run-20260830-144627-940s",
"mode": "cloudsql-failover",
"verdict": "BASELINE",
"metrics": {
"rtoSeconds": 25.509,
"outageSeconds": 25.509
},
"placement": {
"azBefore": "us-central1-a",
"azAfter": "us-central1-f",
"zoneChanged": true
},
"compliance": {
"controlsEvidenced": [
"ISO22301:8.5", "SOC2:A1.3",
"DORA:Art11.6", "PCIDSS:12.10.2",
"RBICSF:AnnexI-17"
],
"objectivesDeclaredBefore": true,
"retentionDays": 400
},
"integrity": {
"digest": "sha256:19f470f156c7c51a…",
"algorithm": "sha256"
}
}
Every Trinetra test run maps automatically to the relevant controls in each framework.
EU Digital Operational Resilience Act. Mandatory DR testing for financial entities and their ICT providers.
Reserve Bank of India Cyber Security Framework. DR drill and RTO/RPO validation for all regulated banks.
Business Continuity Management. Exercising and testing requirements for enterprise procurement.
Recovery procedures are tested. Required for SaaS companies selling into US enterprises.
Incident response plan tested annually. Mandatory for any company handling payment card data.
We'll tell you which workloads are at risk before you commit to anything.