ARCHITECTURE & INFRASTRUCTURE
How VAP ERP Works
Built with embedded systems discipline. Tested quarterly. No hype. Real architecture, real numbers, real transparency.
System Architecture
Your requests flow through layers of isolation and protection. Each layer is independent; if one fails, the others still protect your data.
User Browser
Cloudflare Edge (DDoS, TLS)
Cloud Run Gateway (100 concurrent)
PostgreSQL + Redis (Schema Isolation)
Why This Matters: Each layer enforces isolation independently. Multi-layer protection against any single point of failure.
Data Isolation: Three Layers
Schema Isolation
Database-level tenant boundaries
Row-Level Security
RLS policies enforce row access
Application Logic
Code-level tenant context
Request Lifecycle: Real Numbers
| Component | Time (Warm) | What Happens |
|---|---|---|
| Cloudflare Edge | ~5ms | TLS decrypt, rate limit check |
| Auth & Routing | ~10ms | JWT verify, tenant context |
| Redis Cache | ~2ms | Cached data lookup |
| Database Query | ~20-50ms | Query + RLS applied |
| Total (Warm) | 45–80ms (P95) | What you see |
45–80ms
Warm Response (P95)
Instance running, pool hot, most requests
600–800ms
Cold Start
Instance spun up after inactivity
Reliability: Testing What Matters
What We Practice
- Daily automated backups
- AES-256 encryption
- 2-region replication
- Weekly verification
- Quarterly recovery tests
Latest Recovery Test (2026-06-15)
28-minute RTO
Download: 2 min
Decrypt: 3 min
Restore: 13 min
Verify: 2 min
Test: 5 min
Security: Four Pillars
In Transit
- TLS 1.3
- Cert pinning
- HSTS
- Service encryption
At Rest
- DB encryption
- Backup AES-256
- Vault keys
- Disk encryption
Access Control
- JWT auth
- MFA
- RBAC
- Audit logs
Compliance
- Event logs
- SHA256 chain
- GDPR
- Pen tests
Ready to learn more?
Check out our technical blog for deep dives into architecture.
Vaptechs Team · 14+ Years Systems Engineering
Built on embedded systems discipline. Tested quarterly.