Skip to main content
Empuls is delivered as a multi-tenant SaaS platform built on a containerised, microservices-based architecture running on AWS and Azure, designed for high availability, security, and easy integration with enterprise systems.
Empuls is delivered as a multi-tenant SaaS platform built on a containerised, microservices-based architecture running on AWS and Azure, designed for high availability, security, and easy integration with enterprise systems.

​
Core architectural style

  • N-tier, microservice-based architecture so each service (awards, budgets, surveys, feeds, auth, reports, etc.) can scale and deploy independently.
  • Exposed via REST and GraphQL APIs, consumed by web, mobile, MS Teams/Slack apps, and other channels.

​
Compute, containers & data layer

  • Containers orchestrated using EKS/AKS across multiple availability zones; traffic distributed via cloud load balancers.
  • Polyglot data layer: MySQL for transactional data, MongoDB/CouchDB/Neo4j for document & graph, Redis for cache/queues, ClickHouse and Elasticsearch for analytics and search/audit logs.

​
Scalability & reliability

  • Auto-scaling microservices and master–slave database clusters with read/write separation to handle >400K requests per minute (tested up to ~1M).
  • Active-active HA design with managed DB services, real-time replication, and DR, targeting 99.99% uptime with RPO/RTO of 120 minutes.

​
Security & network

  • Perimeter protection using Cloudflare WAF/Bot management, layered VPCs, security groups, and strict firewall rules; traffic encrypted in transit (TLS 1.2+) and at rest (AES-256 with per-tenant keys managed via KMS/HSM-equivalent).
  • Centralised logging and monitoring via Prometheus, CloudWatch, ELK/EFK, and Security Hub/GuardDuty-style services, feeding into SIEM for threat detection.

​
Integrations & delivery model

  • Delivered as a cloud SaaS tenant per customer; Empuls integrates with HRIS, SSO/AD (SAML2/OAuth2), email/SMS, and payment providers via APIs and secure SFTP.
  • Web and native mobile apps for end users, plus pre-built MS Teams/Slack apps for embedded usage.
Learn more: Empuls Help Centre

Does Empuls use native AWS security tools and services?

Empuls runs on a security-first AWS architecture using native services — VPC isolation, EKS, WAF, and AES-256 encryption — to protect all tenant data…

Empuls' Reward Points and Transactions Securely

Empuls runs on a secure microservices architecture on AWS and Azure, processing over 1 million requests per minute with 99.99% uptime.