Tech behind the SaaS
Stockholm, 10 Jan 2022
Leasify's Saas service "My pages" is described here in a technical basic perspective and the document should be seen as a living document as development progresses rapidly with new requirements and versions over time.
Remember that we have GDPR including the PUB agreement which is the basic agreement for the regulation of data handling, security and requirements. This document in no way supersedes these agreed upon agreements.
Cloud Manager
Cloudnet with Sundbyberg as its starting point handles our operation in the first place. The company monitors, adjusts and manages our primary operating environment https://app.leasify.se.
All access takes place via encrypted SSH access with ongoing logging and personal control.
Server environment and databases are placed within the EU in the best possible location for the best response time and uptime that Cloudnet chooses according to prevailing circumstances. Right now the servers are located in Frankfurt. The operation is automated (scripted) for quick recovery and relocation if necessary.
Amazon's AWS (data center eu-north-1 / Stockholm) is used for long-term storage of documents, OCR scanning and AI services with programmatic access for maximum control and logging.
Security and Backup
All services Leasify uses have 2-factor authentication turned on.
The traffic towards operation servers goes via Cloudflare and WAF to be able to quickly block unauthorized traffic if necessary.
In the spring of 2022, we will require either BankID or the 2FA option for all Leasify users in the system.
Backup takes place continuously (daily) with rotation with a 6-month possibility of restoration according to a specific schedule. This is handled by staff at Cloudnet on request.
Access logging takes place on an ongoing basis partly against web servers, but also against the work steps that take place in the application, such as contract changes and report extraction.
Operational monitoring can be visited from outside via https://status.leasify.se/
Continuous Delivery
All code is versioned and set up with continuous delivery (CI) via tests across version notations. We minimize interruptions during deliveries and thus have no specific time windows for taking down the service during upgrades.
If longer interruptions are required, messages about this will be sent out well in advance of the event and these major upgrades are usually made outside Swedish office hours, more specifically before 07:00 and after 17:00 (Stockholm, GMT+1).
Our operating partner Cloudnet ensures operation 24/7.
Development Methods
The development takes place according to Scrum with 2-week sprints with delivery schedule and demo as well as retro. We use tools for all development with epics, boards, burndown reports and documentation.
Developed functions are demonstrated via "What's new" in the application which comes as notifications for all users.