About our client
The company provides cloud-based construction management software to clients across the globe.
Business challenge
Creating a universal, secure, and auditable file access and storage solution that could meet high-level security standards of both new and
existing customers, who need to migrate without downtime or access issues.
ZoolaTech approach and implementation
After analyzing the existing cloud-based solution built using monolith architecture, we set a goal to improve:
- Standard access patterns working with the files, as solutions were custom and didn’t fully follow the security standards for working with files,
- Authentication and authorization for all functionalities working with files, in some cases it was possible to access some files by users who should not be allowed to access,
- Auditing at the file level, for some operations the auditing was done, for some it was missing,
Storage independence, it was not possible to configure the file storage in a cloud, split storages for different projects or teams and store the auditing logs in a separate folder in a cloud.
Taking into account the identified gaps and security requirements for files storing and sharing and the need for scalability, the Zoolatech team developed a solution using the service-oriented architecture.
The platform includes the following features:
- Takes ownership of of file transfer from/to S3 cloud,
- Allows centralized authentication, which also can be customized depending on the project needs
- Allows centralized and configurable auditing at file level access
- Improved scalability and reliability
- Consistent documentation, which helps to support and update the solution in the future without additional overheads and without risks of breaking the existing functionality.
Value delivered:
- Provided a secure and scalable solution for file storage and access.
- Enabled the company to expand its market reach to major enterprises globally.
- Facilitated compliance with ISO 19650 and other International Standards Organization requirements.
- Enabled the global market of construction companies where teams, all stakeholders, and partners can collaborate on construction projects and share access to different kinds of documents.