Case studies

Compliant Kubernetes

Tempus

Tempus is a fast growing and modern daycare planning platform, managing the trust and data privacy of thousands of parents every day.

Tempus runs Compliant Kubernetes as a managed service, allowing them to focus on their customers without having to worry about keeping up with platform lifecycle management, security patching, backups and general cloud native and security awareness.

We handle very sensitive data. We decided on Elastisys Compliant Kubernetes as it doesn’t lock you into any cloud, is available under European jurisdiction, is built on best practice from the cloud native community and comes pre-configured for all our security and compliance needs, saving us a lot of effort

Joel Hörnqvist

CEO

Professional Services

FRISQ

Background: FRISQ is a Swedish medtech company that aims to be the leading force in the digitalization of care plans. Its FRISQ Care software solution allows for the sharing of information between caregivers and patients through the same platform.

Challenge: FRISQ had been growing quickly and needed to keep serving their growing development teams with world-class DevSecOps capabilities. FRISQ also handles sensitive patient data and required a high security, cloud-agnostic container platform to be able to run their applications in hybrid use cases; both as a service in public clouds and white labeled at hospital premises.

Solution: Elastisys provided a DevSecOps as a Service team that have supported FRISQ, taking ownership of parts of the DevOps process as well as setting up cloud-agnostic and secure Kubernetes based infrastructure in a seamless manner across EU and US cloud providers.

Elastisys work as strategic cloud-native advisors and DevSecOps team has enabled us to move faster and feel confident that we are building a cloud infrastructure that both will stand up to the highest security requirements and give us the flexibility and regulatory compliance we need as our business expands to new international markets, both in Europe and in the US.

Örjan Lindström

Chief Development Officer

Northmill

Background: Northmill is a modern bank that is experiencing rapid growth and expanding internationally, operating in Sweden, Finland and Poland.

Challenge: Northmill needs to allow for a high degree of innovation and speed while being bound by strict banking and privacy regulations, including ISO 27001, FFFS2014:5 and GDPR.

Solution: Elastisys helped Northmill select the most cost-effective technical implementations on AWS from a regulatory perspective, identify actionable implementation tasks and perform hands-on implementation. Elastisys also held training and advised from C-level to engineering.

We recently received a banking license, which allows us to penetrate new markets, something we want to do with best in class compliance. We chose Elastisys to help us on this journey, due to their previous experience in regulated industries, in particular in fintech. Their experience helped us achieve compliance, without compromising our culture of agile product delivery.

Hikmet Ego

CEO

Klarna

Background: Klarna provides banking and payment solutions for 60 million people and 100 000 stores spread over 14 countries.

Challenge: Klarna required a multi-tenant solution for building and managing services in AWS. Operating in a high compliance environment, a crucial part was to offload as much of the compliance requirements as possible from individual services and hide it behind this multi-tenant service.

Solution: Elastisys built a multi-tenant service with data-layer isolation in AWS, using AWS Cognito, Lambda, DynamoDB and API Gateway. The serverless nature made security updates and similar compliance requirements automatically taken care of by Amazon.

The Elastisys team showed great technical and social skills and quickly understood the problem and the environment. They proactively engaged with other teams and developed a very high-quality solution. I perceived them as very professional and can recommend them unreservedly for any type of engineering project.

René Bruns

Engineering manager

William Hill

Background: Mr Green, now a William Hill subsidiary, operates one of the worlds largest online casinos.

Challenge: Mr Green required a secure and compliant container platform that would enable innovation and faster developer iterations while still staying compliant with the strict requirements of GDPR and the Swedish casino regulations.

Solution: Elastisys delivered a Kubernetes based container platform, complete with features like audit logging, network segregation, RBAC authentication that runs on-premise on VMware.

The solution Elastisys built enables us to serve our developers the modern infrastructure they are used to while still adhering to our strict security regulations