Infrastructure & Architecture

Carriyo's production infrastructure is hosted on Amazon Web Services. Production data is hosted in AWS eu-west-1 (Ireland); customers may opt into a paid cross-region DR replica in AWS us-east-2 (US). Our cloud environment is configured following provider best practices and CIS benchmarks.

• All production workloads run in isolated virtual private clouds (VPCs)
• Infrastructure is provisioned and managed using infrastructure-as-code
• Environments are fully separated: development, staging, and production

Network access is strictly controlled through multiple layers of defense:

• Web Application Firewall (WAF) protects all public-facing endpoints
• DDoS protection is enabled at the network and application layers
• Network segmentation isolates production systems from internal networks
• All internal service-to-service communication is encrypted
• Egress traffic is filtered and monitored

Carriyo's infrastructure is designed to maintain 99.9% uptime:

• Multi-availability-zone deployments for all critical services
• Automated failover for databases and stateful services
• Auto-scaling for application workloads based on demand
• Optional paid cross-region disaster recovery replica in AWS us-east-2 (US)

Comprehensive monitoring ensures rapid detection and response to issues:

• Centralized logging for all application and infrastructure events
• Real-time alerting for anomalous activity and threshold breaches
• Uptime monitoring with sub-minute resolution
• Audit logs retained for a minimum of 12 months
• Regular review of monitoring effectiveness and coverage

All infrastructure changes follow a controlled process:

• Changes require peer review and approval before deployment
• Automated testing in staging environments before production rollout
• Deployment pipelines include security scanning and compliance checks
• Rollback procedures documented and tested for all critical changes