This chapter provides a detailed insight into the technological foundation of the ecrop platform. We will explore the innovative architecture, emphasizing security, scalability, and performance, and explain how we leverage cutting-edge technologies like blockchain, decentralized validators, and cloud-native infrastructure to meet the stringent requirements of the eWpG and crypto custody regulations. This in-depth overview is designed for Business Decision Makers, Technical Executives, and Developers seeking a comprehensive understanding of ecrop’s robust and reliable solution.

​
A Modern, Multi-Layered, Cloud-Native Architecture

The ecrop platform is built on a modern, multi-layered, and cloud-native architecture, meticulously designed to address the specific demands of the crypto securities and crypto custody business. This architecture, divided into logical layers, ensures clear separation of responsibilities, promoting maintainability and scalability. The use of microservices further enhances flexibility and allows for independent scaling of individual components.

​
Cloud-Native Infrastructure (AWS): The Foundation of Reliability and Scalability

We leverage the power and flexibility of Amazon Web Services (AWS) to provide a secure, reliable, and scalable foundation for our platform.

  • High Availability and Performance: Utilizing multiple Availability Zones and regions within the AWS ecosystem ensures redundancy and minimizes the risk of outages, guaranteeing high availability and optimal performance, even during peak loads. This resilient infrastructure allows us to maintain uninterrupted service and meet the demands of a rapidly growing market.

  • Optimized Resource Utilization and Cost Efficiency: By leveraging AWS Managed Services, such as Amazon RDS for databases and Amazon S3 for storage, we optimize resource utilization and minimize administrative overhead, resulting in cost-effectiveness and allowing us to focus on innovation and development. This efficient approach ensures that you only pay for the resources you need, maximizing your return on investment.

  • Comprehensive Security Mechanisms: AWS provides a robust suite of security mechanisms, including encryption, access controls, firewalls, and intrusion detection/prevention systems, which we leverage to protect your data and ensure the highest level of security. This comprehensive security framework minimizes vulnerabilities and safeguards your assets from unauthorized access and cyber threats.

  • Best Practices & Compliance: Adhering to the best practices of the AWS Well-Architected Framework and the requirements of the BSI IT-Grundschutz ensures optimal architecture, performance, reliability, and cost efficiency. We also maintain strict compliance with all relevant regulations, including eWpG and CryptoAssetTransferV, providing a secure and compliant platform for your digital asset needs.

​
Security Architecture: Defense in Depth for Uncompromising Protection

Security is paramount at ecrop. Our multi-layered security architecture is designed to protect your digital assets at all levels, employing a defense-in-depth strategy to minimize vulnerabilities and ensure the highest level of protection.

  • Zero-Trust Principle: We implement the Zero Trust security model, requiring all access to be authenticated and authorized, regardless of location or network. This approach minimizes the attack surface and prevents unauthorized access to sensitive data.

  • Continuous Monitoring & Intrusion Detection: Our systems are continuously monitored using state-of-the-art Intrusion Detection/Prevention Systems (IDS/IPS) to detect and respond to threats in real-time. This proactive approach helps us identify and mitigate potential security breaches before they can cause damage.

  • Regular Security Reviews, Penetration Tests & Vulnerability Scans: Independent security experts conduct regular security reviews, penetration tests, and vulnerability scans to ensure that our systems are secure and up-to-date with the latest security patches. This ongoing process helps us identify and address potential vulnerabilities before they can be exploited.

  • Strict Separation of Environments: We maintain strict separation of development, test, and production environments to minimize the risk of errors or security vulnerabilities migrating to the production environment. This ensures the stability and security of our platform.

  • ISO 27001 Certification: Our ISO 27001 certification demonstrates our commitment to information security and compliance with the highest international standards. This certification provides independent validation of our robust security practices.

​
Scalability and Performance: Built for Growth

The ecrop platform is designed to scale seamlessly with your business needs, ensuring high performance and responsiveness, even during peak transaction volumes.

  • Horizontal Scalability: Our microservices architecture, deployed using Kubernetes and Docker containers, allows for horizontal scaling of resources, enabling us to handle increasing transaction volumes and data loads without compromising performance. This ensures that your platform can grow with your business.

  • Automatic Scaling (Auto-Scaling): Leveraging AWS Auto-Scaling allows us to dynamically adjust resources based on demand, ensuring optimal resource utilization and cost efficiency. This allows you to scale your operations without incurring unnecessary expenses.

  • Flexible Capacity Adjustment: We proactively plan our capacities and continuously monitor performance to ensure that our platform can meet your future needs. This proactive approach allows us to anticipate and address potential bottlenecks before they impact performance.

Components and Data Flows:

  • Frontend: The user interface, built with modern Frontend Technologies, providing access to platform functionalities. Communicates securely with the backend via HTTPS and JWT-based authentication.

  • Load Balancer: Distributes incoming traffic across multiple backend servers for high availability and performance.

  • Backend Services (Microservices): Modular microservices providing core functionalities like API access, wallet services, registry services, and compliance services.

  • Database (AWS RDS, PostgreSQL): Redundant and scalable database cluster in the AWS Cloud, storing off-chain data. Employs Master-Slave replication for high availability.

  • Blockchain (Private Permissioned, Hyperledger Besu): Secure and transparent ledger for recording transactions and registry data, operated by a consortium of trusted partners.

  • Hardware Security Modules (HSMs): Physically secured and isolated hardware devices for generating and storing cryptographic keys.

  • Monitoring & Alerting: Real-time monitoring of all platform components and automated alerts for critical events.

  • KYC/AML Provider (e.g., PostIdent): Secure integration with external KYC/AML providers for automated identity verification.

  • Payment Provider (e.g., Secupay AG): Secure integration with external payment providers for processing fiat transactions.

PricingPoA