All case studies
Confidential clientDigital lending platform
case study / Confidential client
Secure, India-resident AWS for a lending platform
Rebuilt a lending platform's AWS environment so borrower data stays in India, is encrypted everywhere and is monitored with on-call alerting, ready for its NBFC partners' due-diligence reviews.
- Client
- Digital lending platform
- Industry
- Fintech / Lending
- Service
- Security & Compliance · Managed Support
The challenge
The platform handles borrower KYC documents and repayment data, and its NBFC partners review its infrastructure before going live. It needed data kept in India, encryption everywhere, no public access to databases or documents, and someone on call for the environment.
What we built
- A multi-account setup with AWS Control Tower, separating production, staging and a dedicated log-archive account
- Application in private subnets behind an Application Load Balancer and AWS WAF
- Amazon RDS for PostgreSQL in a Multi-AZ configuration, encrypted with KMS
- KYC documents in Amazon S3 with Block Public Access, KMS encryption and short-lived presigned URLs
- GuardDuty, AWS Security Hub CSPM and AWS Config rules, with findings routed to an on-call engineer
- AWS Backup with copies to a second AWS region in India, plus monitoring and monthly health reviews
Architecture
aws regions in india
AWS services used
aws services
| AWS service | Role in the solution |
|---|---|
| AWS Control Tower | Separate production, staging and log-archive accounts with guardrails. |
| AWS WAF + ALB | Filters malicious traffic before it reaches the application. |
| Amazon RDS (Multi-AZ) + KMS | Encrypted database with automatic failover. |
| Amazon S3 | Private, encrypted KYC document storage with presigned access. |
| GuardDuty + Security Hub + Config | Threat detection and continuous configuration checks. |
| AWS Backup + CloudWatch | India-resident backups, monitoring and on-call alerting. |
Outcomes
- All borrower data stored and backed up within AWS regions in India
- Encryption at rest and in transit across databases, documents and backups
- Security findings routed to an on-call engineer
- An evidence trail ready for partner due-diligence reviews
More case studies
next step
Ready to scale smarter?
Book a free 30-minute call with one of our engineers. Bring your architecture, your bill or your AI idea, and leave with a plan for what to fix first.