Business challenge
The client provides a business system to its users. It needs infrastructure that operates without interruption, protects data, and meets security audit requirements.
Solution
We designed and maintain an environment in a European Microsoft Azure region, supporting GDPR compliance. The database runs in high-availability mode across availability zones, while backups are geo-replicated. The environment also includes file versioning, data encryption, a web application firewall (WAF), and continuous monitoring. We manage the infrastructure under an ISO/IEC 27001-compliant security management system.
Environment architecture
Users connect to the application through Application Gateway. Web servers operate in two availability zones, asynchronous services run on separate servers, Azure Database for MySQL runs in high-availability mode, and files are replicated across three zones. In this configuration, the recovery point objective (RPO) is 5 minutes, the recovery time objective (RTO) is 15 minutes, and availability is 99.9%. For companies operating in Poland, the application integrates with KSeF (Poland's National e-Invoicing System) through KSeF Connector and Cloud Agent.
We select the architecture according to the required availability and budget. See the implementation options with RPO, RTO, and SLA parameters.
Outcome for the company
The client uses the system through a browser and does not need to maintain its own servers. Our maintenance team provides updates, backups, and scaling. The environment undergoes penetration testing and backup recovery testing every year.