Infrastructure
Backbuild runs on a serverless, globally distributed infrastructure. The platform is designed for high availability, horizontal scalability, and security isolation between tenants. A detailed architecture diagram is available to customers under NDA.
Compute
Application code runs on a serverless edge compute platform. Code executes in isolated runtime contexts at the edge location nearest the user. There are no long-lived servers to patch or manage at the application tier, and runtime security updates are delivered by the platform provider.
Data storage
- Primary database: a managed, horizontally scalable relational database stores transactional customer data, sharding for scale while preserving standard relational semantics.
- Object storage: managed, globally distributed object storage holds binary assets, backups, and bulk exports.
- Distributed cache: a low-latency distributed key-value store provides caching, rate-limiting state, and short-lived operational data.
- Connection pooling: database connections are pooled and cached at the edge to reduce connection overhead for serverless workloads.
Network and edge
- All public traffic traverses a global edge network that provides DDoS mitigation, bot management, TLS termination, and Web Application Firewall capability.
- DNS is managed with DNSSEC available.
- Private inter-service communication between the application tier and data services is encrypted.
Multi-region availability
Edge compute is inherently multi-region: application code runs across hundreds of points of presence worldwide, and requests are served from the nearest available location. The primary database is located in the United States and is replicated for resilience. Failover within the database tier is handled by the managed service provider.
Observability
Platform logs, metrics, and traces are collected centrally with correlation identifiers that tie individual requests together across services. Security-relevant events are routed to an append-only audit store with tamper-evident integrity protection.
Architecture diagram
A detailed architecture diagram is available to customers and prospective customers under a mutual non-disclosure agreement. The diagram is not published on this site in order to avoid providing an unnecessary roadmap to potential attackers.
Explore infrastructure details
- Availability: SLA, status page, redundancy, RTO/RPO
- Business continuity and disaster recovery
Contact
Infrastructure questions or architecture review requests: security@backbuild.ai