SelfGuide is a SaaS application hosted on Microsoft Azure, build and maintained by SelfGuide. In this article, the high level architecture of the application is explained, as also aspects as maintenance and access.
All customer use a dedicated SelfGuide tenant to create and consume content, the tenant can be recognized by the URL https://tenantnaam.selfguide.com. The name of the tenant is chosen when started and can not be changed in the future.
Each tenant is build on its own Microsoft Azure resources and these resources act as the boundaries of a SelfGuide tenant. This design is chosen for an optimal security posture to overcome risks like unwanted data access across customers. Also, if needed, there is flexibility to scale tenant resources to give all customers the desired performance.
A tenant consists of the resources below:
A disaster recovery scenario is taken care of with several measures:
Additional measures are available in case the hosting location, as also the backup location, are unavailable:
Microsoft Azure resources are monitored to gain insights about availability, performance an usage. The product itself sends additional telemetry information. Monitoring data is used to:
All Azure resources are hosted in Azure region West Europe, in a datacenter in The Netherlands. Backup sets are stored separately using Azure region North Europe, in a datacenter in Ireland.
Backup datasets are stored in Amazon AWS region Europe (Frankfurt) Region.
Product maintenance and release deployments are solely performed by SelfGuide employees. A fixed group of employees has access to the production tenants resources, all with extensive knowledge about the product. Access is gained using personal administrative accounts, audit trails are stored to gain insights in used access and performed operations.