¶ JOIN Enterprise Cloud
JOIN Customer Contact together with JOIN Case & Document form the heart of JOIN Enterprise. All customer contact sessions, cases, and documents are stored in the JOIN Enterprise cloud. JOIN is offered as a cloud solution running in Microsoft Azure’s data centers in West Europe.
¶ VPN IPSEC secure connection
JOIN Customer Contact and JOIN Case & Document are available as a private cloud solution. A private cloud solution is isolated and used by only one organization. This private cloud solution can connect to other applications in the organization using a Site-to-Site VPN IPSEC tunnel.
The use of a VPN IPSEC connection between your network(s) and the JOIN Enterprise cloud allows for a private & secure connection to access JOIN Enterprise for your users and your own local networks.
Detailed requirements for VPN Device configurations can be found here: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpn-devices
¶ IP whitelisting
An alternative to VPN IPSEC would be to use whitelisting for user access to the JOIN Enterprise cloud solutions or web applications. Various levels of flexibility and security measures are possible this way. However, we do recommend using a VPN IPSEC connection.
¶ Microsoft Azure
Decos is a Microsoft Gold partner for Cloud hosting and Application Development. We offer JOIN Enterprise Cloud hosting within the Microsoft Azure Cloud in isolated environments, running exclusively for a single customer. The environment is fully managed by Decos using role-based access for Decos employees covering support, consultancy and IT professional teams.
Key components of the application are highly available. This gives Microsoft Azure an uptime guarantee of >99.5%. The same uptime is guaranteed on storage services of Azure SQL and Azure Blob Storage.
¶ Backup and restore
We take data availability in our cloud solutions very seriously. We use different methods to back-up your data for restore purposes, for example point-in-time-restore (PITR), snapshots and differential backups. For every resource we have configured a retention policy. If you want more information on the retention policy contact Decos Security.
To secure your data, we can store the data either redundant within a zone in a datacenter (LRS), or at multiple zones within a datacenter within the EEA (ZRS), or in multiple datacenters (sometimes in multiple countries) within the EEA (GRS). Contact your account manager for more information about this or check the website of Microsoft: Data redundancy - Azure Storage.
¶ Production and acceptance environments
If an acceptance environment is requested, a duplicate environment with reduced capacity (vCPU & memory) is set up and separately provided from the production environment. Decos offers separate tooling in case a client wants to duplicate the production data back to the acceptance environment including anonymization measures.
¶ On-premise installations
Decos also supports on-premise installations of JOIN Enterprise. See chapter 11 of this document for the details related to on-premise deployments of JOIN solutions. Installations in any cloud environment other than the Decos JOIN Enterprise Cloud are also considered as client on-premise installations.
¶ Architecture
The architecture of the JOIN Enterprise cloud is visualized in the next diagram.
