Product
Incident Timeline
Incidents with severity and impact, moved through triage, containment, resolution and review in order.
On this page
What it does
Incident Timeline keeps a register of incident records for your account. Running an incident in order and leaving a record of how it went. Each incident has a title and the fields below, and its state moves only along the steps listed. The database refuses any other step and any value outside the field rules, and a record in a final state cannot be changed.
The fields
| Field | Holds | Entry |
|---|---|---|
| Severity | one of a fixed list; one of low, medium, high, critical | required |
| Detected on | a date | required |
| Summary | text (up to 2,000 characters) | required |
| Impact | text (up to 2,000 characters) | optional |
| Incident lead | one line of text (up to 200 characters) | optional |
The states
A new incident starts as detected.
| State | May move to |
|---|---|
| detected | triaged |
| triaged | contained |
| contained | resolved |
| resolved | reviewed |
| reviewed | final state |
Using it
Signed-in accounts open the Incident Timeline, add records, and move them between states. The change is recorded in the account's audit chain; a state change names the revision it was made against and is refused if the record has moved on. The same operations are available as JSON on the same address.
Data handling
Records belong to the account that created them and are visible to that account only. They are stored in the platform's PostgreSQL database. Do not store special-category personal data in a register unless you have a lawful basis; the privacy notice states what the platform collects and keeps.
Limits
- It is a register for one account; sharing a register between accounts and attaching files are not built.
- The account cannot delete or edit a record, and a record in a final state is kept as it was. The automated erasure step does not remove register records: an erasure request that covers them is completed by the operator.
- There are no reminders or recurring records: dates are stored and shown, nothing is sent when one passes.
- It does not give legal, clinical or regulatory advice; the account holder remains responsible for what the records mean.
Availability
Incident Timeline is running on RJV's own platform. RJV does not sell a licence for it as a separate product today: the commercial terms state what is on sale. It can be part of the result of an engineering engagement, where the written proposal names it, its licence terms and what you would hold at the end. To discuss it, use Work with Us.
Evidence
The field rules, the permitted steps and the refusal of every other step are enforced by the database and exercised by the platform's own tests. The evidence register lists the graded claims.
Works with
- Audit Chain: Requires. Each record created or moved is entered in the account's audit chain.
- Identity and Access: Requires. An account signs in and holds the grant that lets it use the register.
- Asset Tracker: Works with. Records in one can be linked to records in the other.
- Clinical Trial Digitisation: Works with. Sets up or reviews the records kept here.
- Energy and Utilities: Works with. Used in this industry.
- Grid Resilience Assessment: Works with. Sets up or reviews the records kept here.
- Healthcare and Life Sciences: Works with. Used in this industry.
- HIPAA Readiness Assessment: Works with. Sets up or reviews the records kept here.
- Outage Coordination: Works with. Records in one can be linked to records in the other.
- Public Sector: Works with. Used in this industry.
- Public Sector AI Readiness: Works with. Sets up or reviews the records kept here.
- Risk Register: Works with. Records in one can be linked to records in the other.
- Sovereign Migration: Works with. Sets up or reviews the records kept here.
- Utility SOC Build: Works with. Sets up or reviews the records kept here.
Where it runs
| Supported target | A customer-controlled Linux host on x86-64 with PostgreSQL 18 (linux-x86_64-customer-controlled). |
|---|---|
| Not yet supported | Windows, macOS, phones and tablets, and Linux on other architectures. Each needs its own installation, update and recovery evidence before it is supported. |
| Check a device | Run rjv2 preflight on it. It reads the operating system, architecture, memory, disk, listen address, configuration, database, database role and schema, changes nothing, and exits non-zero if release 2.0.0-alpha.1 cannot run there. |
| Installed as | One application and a PostgreSQL database. Installing release 2.0.0-alpha.1 (schema 100) installs every system on this site, including Incident Timeline. |
| Data | It stays in the PostgreSQL database you run. The only outside service the release can use is an outbound mail relay that you configure. |
| Updating | A release is a numbered build. The schema is applied by a separate owner step (rjv2 migrate), and the application refuses to serve a schema it was not built for. |
| Backup and restore | rjv2 backup writes a checksummed dump. rjv2 restore restores it into an empty database and checks the checksum, the schema version and the audit chain of every account. |
| Leaving | The data is in your own database and can be dumped at any time. What you may do with the release is set by the terms on deployment and ownership. |
- Published
- 29 October 2026
- Revision
- 2