Technology Architecture Diagram
CMS technology layers, protected entry path, independently deployable services, data platforms, identity controls, and support technologies
PRESENTATION LAYER (React SPA)
UI
Shared UI Components
Layout, routing, widgets, tables, filters, and forms
React SPA
Web client for CMS modules and user actions
NAV
Navigation & Routing
Screen access and page flow control
SCR
Screen Modules
Profile, roster, attendance, events, leave, trainings, and more
Protected requests pass through enterprise and edge access controls before reaching application services
SECURITY & ACCESS LAYER
ZS
Zscaler
Enterprise-controlled access path
AK
Akamai
WAF, DDoS, bot protection, and routing
AG
Azure Application Gateway
Protected ingress and application routing
APPLICATION LAYER
Independently deployable services coordinated by the BFF / orchestration layer
BFF
BFF / Orchestration
UI-facing API composition and response shaping
DOM
Domain Services
Profile, roster, attendance, events, leave, trainings, qualifications, recruitment, productivity
WF
Workflow Service
State, routing, approvals, and transitions
NT
Notification Service
Internal notifications and outbound status tracking
DOC
Document Management Service
Controlled upload, retrieval, and file lifecycle
DATA LAYER
FAB
Microsoft Fabric
Read-only enterprise analytical datasets
DDB
Azure DocumentDB
Operational workflow state, notification state, preferences, and metadata
ADLS
ADLS Gen2
Document storage, attachments, generated exports, and artifacts
IDENTITY & AUTHORIZATION
AAD
Azure AD
SSO, token issuance, and identity context
RBAC
RBAC + ABAC
Server-side authorization controls across protected operations
EXTERNAL & SUPPORT TECHNOLOGIES
DD
Datadog
Logs, metrics, traces, and monitoring
IB
Infobip
Email / outbound notification delivery integration
OBS
Observability
Operational insight across services and integrations
SEC
Support Controls
Cross-cutting controls and service support capabilities
Presentation / user-facing layer
Security & access technologies
Core application services
Data platforms
Identity & authorization
External & support technologies