CAM Architecture

CAM is designed to help firms manage cloud-based content across the full matter life cycle and ensures data is accessible, usable, and secure. CAM uses leading cloud service provider Amazon Web Services (AWS) - a secure scalable cloud computing platform with high availability and dependability.

Open

How CAM Works

The CAM Architecture is built and maintained through AWS Cloud Formation templates. The template is used to create a collection of AWS resources and to provision a set of standardized infrastructure components in an automated manner across all accounts. The following AWS resources are provisioned:

1. Amazon Cloud Formation for infrastructure deployment.

2. Amazon Cognito for secure tenant creation and sign-in.

   1. AWS Identity and Access Management (IAM) for secure access to AWS services.

3. Amazon Simple Email Service (Amazon SES) to send notification emails.

4. Amazon Route53 is a Domain Name System (DNS) web service for name resolution.

5. Amazon CloudFront is a content delivery network (CDN) for faster data delivery.

   1. AWS Certificate Manager to secure the identity of the websites.

6. Amazon API Gateway to process API calls.

7. Amazon Virtual Private Cloud (VPC) for private virtual network to create a private sub-net for the database. The following AWS resources are placed in the VPC:

   1. AWS Lambda offers the benefit to run the code without provisioning servers.

   2. Amazon DynamoDB offers the benefit of a NoSQL high-performance database service.

   3. Amazon Relational Database Service (Amazon RDS) as a database service (Amazon Aurora).

   4. Amazon Elastic Search Service (Amazon ES) to operate ElasticSearch.

   5. Amazon EC2 with Elastic Load Balancing and Auto Scaling to maximize performance.

8. Amazon CloudWatch for notification alerts and service monitoring.

9. Amazon Simple Notification Service (Amazon SNS) for platform notifications.

10. Amazon Simple Storage Service (Amazon S3) for cloud storage and retrieving data.

Data Security

• Access CAM: CAM is accessed over HTTPS from any modern browser.

• Access to client on-premises Database: CAM does not make any changes to your on-premises database and access to the database is restricted to authorized roles only.

• Data Encryption in Transit and Rest: All the data in transit and rest are encrypted. CAM ensures robust data protection across endpoints and networks to protect data in both states.

• Virtual Private Cloud: The data servers are placed in a secure private sub-net that cannot be accessed from the internet.

• High Data Availability / Disaster Recovery: AWS has a worldwide network of data centers and data is replicated across different regions. This speeds up the availability of your data by connecting you to the nearest data center location and retrieving data faster. This in turn ensures data is always available and avoids any negative impact due to service outages or natural disasters.

• Data Sync: CAM can be configured to continuously sync data from your on-premises database to the cloud. This ensures a live cloud copy of your data is always available in case of any service outages.

• SOC 2 certification: Litera is in the process of obtaining SOC 2 certification for CAM directly which will further confirm our service is specifically designed and managed to maintain the highest level of data security. Litera does have ISO 27000.1 certification for its products.

• Scalability: CAM is designed to scale out and handle variable workloads and peaks in activity without impact on performance.

Application Security

Security is a critical part of any application. CAM security measures are configured to protect data and manage authentication rules for individuals and groups to ensure the confidentiality of your data. Our security features include:

• SAML-based SSO (Single Sign On): SAML authentication is the process of verifying the user’s identity and credentials. It provides a very secure method of passing user authentications and authorizations between the identity provider and CAM. All CAM users are authenticated and sessions are audited within the application. CAM has a strong Identity and Access Management solution (IAM) that prevents any unauthorized users from connecting to the system.

• Data Access Control: CAM provides role-based access control to set user / group-specific access and editing permissions for data.

• Monitor User Activity: CAM allows you to monitor and generate reports to track any irregular user activities such as the mass download of data or cabinets and workspaces regularly accessed and updated.

For more security info check out the FAQ: CAM Security FAQ