> ## Documentation Index
> Fetch the complete documentation index at: https://docs.xloud.tech/llms.txt
> Use this file to discover all available pages before exploring further.

# DR Compliance

> Generate audit-ready RPO/RTO compliance reports, DR test audit trails, and failover history from XDR for regulatory and internal governance requirements.

## Overview

XDR generates audit-ready reports documenting replication status, achieved RPO/RTO
values from DR tests, and complete failover history. These reports satisfy common
regulatory requirements (ISO 22301, SOC 2 Type II, HIPAA, PCI-DSS) that mandate
documented DR testing and measurable recovery objectives.

<Note>
  **Prerequisites**

  * Protection plans with at least one completed DR test
  * Administrator access to **Disaster Recovery → Reports**
  * Compliance reporting period defined (typically monthly, quarterly, or annual)
</Note>

***

## Report Types

| Report Type                  | Contents                                                 | Typical Use                                |
| ---------------------------- | -------------------------------------------------------- | ------------------------------------------ |
| **RPO/RTO Compliance**       | Achieved vs configured RPO and RTO per plan per period   | Regulatory submission, internal governance |
| **DR Test History**          | All DR test events — date, plan, measured RTO, pass/fail | Audit evidence of testing cadence          |
| **Failover Audit Log**       | Complete record of all failover and failback events      | Incident investigation, change management  |
| **Replication Status**       | Daily snapshot of replication lag and data currency      | Ongoing compliance monitoring              |
| **Recovery Point Inventory** | Available recovery points per plan at report time        | Data retention compliance                  |

***

## Generating Reports

<Tabs>
  <Tab title="Dashboard" icon="gauge">
    Navigate to **Disaster Recovery → Reports** and select the report type:

    <Steps titleSize="h3">
      <Step title="Select report type" icon="file-text">
        Select from the report type list. Each report type has configurable parameters
        for the plan name, date range, and output format.
      </Step>

      <Step title="Set parameters" icon="settings">
        | Parameter            | Description                                        |
        | -------------------- | -------------------------------------------------- |
        | **Plan**             | Specific plan or "All Plans"                       |
        | **From / To**        | Reporting period start and end dates               |
        | **Format**           | PDF (for submission) or CSV (for further analysis) |
        | **Include raw data** | Append raw metric data as appendix (PDF only)      |
      </Step>

      <Step title="Generate and download" icon="download">
        Click **Generate Report**. The report is created and available for download
        within seconds for short periods, or minutes for long reporting periods.

        <Check>Report downloaded and shows plan name, period, achieved RPO/RTO values, and compliance status.</Check>
      </Step>
    </Steps>
  </Tab>

  <Tab title="CLI" icon="terminal">
    <Info>
      XDR disaster recovery operations are managed exclusively through the XDR Dashboard.
      CLI access is not available for DR operations. Use the **Dashboard** tab above to
      generate and download compliance reports.
    </Info>
  </Tab>
</Tabs>

***

## DR Test Cadence Requirements

Most regulatory frameworks mandate regular DR testing. XDR tracks test history
automatically. Use XIMP to alert when testing cadence slips:

| Regulation        | Typical DR Testing Requirement                                 |
| ----------------- | -------------------------------------------------------------- |
| **ISO 22301**     | Annual minimum; test must cover critical systems               |
| **SOC 2 Type II** | At least annual; evidence of testing required for audit        |
| **HIPAA**         | No explicit cadence; must be "tested and revised" periodically |
| **PCI-DSS**       | Annual test of incident response / DR procedures               |

<Tip>
  Configure a XIMP alert for `xdr_last_test_age_days > 90` to ensure quarterly testing.
  This exceeds all common regulatory minimums and provides early warning to schedule
  tests before the annual window closes. See [Monitoring](/services/disaster-recovery/admin-guide/monitoring)
  for alert rule configuration.
</Tip>

***

## RPO/RTO Compliance Report Contents

The RPO/RTO Compliance report includes the following sections:

<AccordionGroup>
  <Accordion title="Executive summary" icon="file-text">
    One-page summary showing:

    * Protection plans covered
    * Reporting period
    * Overall compliance status (compliant / non-compliant)
    * Number of DR tests performed
    * Number of actual failover events
  </Accordion>

  <Accordion title="Per-plan RPO compliance" icon="clock">
    For each plan:

    * Configured RPO target
    * Average, p95, and maximum replication lag during the period
    * Percentage of time replication lag was within RPO target
    * Number of RPO breach events and total breach duration
  </Accordion>

  <Accordion title="Per-plan RTO compliance" icon="zap">
    From DR test results:

    * Configured RTO target
    * Measured RTO for each DR test performed in the period
    * Pass/fail against configured target
    * Trend (improving, stable, degrading)
  </Accordion>

  <Accordion title="Appendix: raw event data" icon="database">
    Optional detailed data:

    * Replication lag time series
    * All recovery point timestamps
    * Script execution logs from DR tests
    * Failover event timelines
  </Accordion>
</AccordionGroup>

***

## Automated Report Delivery

Schedule compliance reports for automatic generation and delivery. Navigate to
**Disaster Recovery → Reports → Scheduled Reports** and click **Create Schedule**:

| Setting         | Description                                                |
| --------------- | ---------------------------------------------------------- |
| **Report Type** | RPO/RTO Compliance, DR Test History, or Failover Audit Log |
| **Plans**       | Specific plan or all plans                                 |
| **Frequency**   | Monthly, quarterly, or annual                              |
| **Format**      | PDF (for submission) or CSV (for analysis)                 |
| **Recipients**  | Email addresses for automatic delivery                     |

Manage existing schedules from the **Scheduled Reports** list.

***

## Evidence Preservation

Compliance audits may require evidence that DR testing and monitoring occurred
throughout the audit period. XDR retains:

| Data Type               | Retention Period                   | Location                   |
| ----------------------- | ---------------------------------- | -------------------------- |
| DR test reports         | Indefinite (until manual deletion) | XDR controller database    |
| Replication lag metrics | 90 days raw; 1 year downsampled    | XIMP metric store          |
| Failover event logs     | Indefinite                         | XDR controller audit log   |
| Runbook script output   | 90 days                            | XDR controller log archive |

<Warning>
  If your regulatory framework requires longer retention, export reports to an
  external system immediately after generation. XDR does not enforce retention
  beyond the defaults listed above.
</Warning>

***

## Next Steps

<CardGroup cols={2}>
  <Card title="Monitoring" href="/services/disaster-recovery/admin-guide/monitoring" color="#197560">
    Configure alerts to maintain compliance proactively
  </Card>

  <Card title="XDR User Guide — DR Testing" href="/services/disaster-recovery/user-guide/test-dr" color="#197560">
    Run DR tests to generate the evidence captured in compliance reports
  </Card>

  <Card title="Security" href="/services/disaster-recovery/admin-guide/security" color="#197560">
    Access control and audit trail for XDR administrative operations
  </Card>

  <Card title="Troubleshooting" href="/services/disaster-recovery/admin-guide/troubleshooting" color="#197560">
    Diagnose replication lag that threatens RPO compliance
  </Card>
</CardGroup>