Active–Passive Warm Standby
- Target RTO
- 10–15 minutes (automated)
- Target RPO
- Near-zero (sub-second)
- Data Tier
- Amazon Aurora PostgreSQL Serverless v2 Global Database, cross-region replication
Technical Specifications
Engineered for the realities of aviation catering.
Galley XAI is multi-tenant SaaS on AWS with per-tenant data isolation, 99.9% uptime, and compliance frameworks that match real audit conditions. Every capability described below is delivered today.
99.9% Uptime target
SOC 2 Type II audited
AWS Cloud-native SaaS
Per-tenant Data isolation
Architecture
Platform architecture
- Hosting
- Amazon Web Services, 99.9% uptime target
- Backend services
- Node.js + Express, containerized on Amazon ECS Fargate with images in ECR
- Database
- Aurora PostgreSQL Serverless v2, dedicated per tenant for isolation
- Caching
- Amazon ElastiCache (Redis) for session and hot-path data
- Eventing
- Amazon EventBridge, Lambda, SQS, and SNS for event-driven workflows
- Storage
- Amazon S3 for documents, exports, and binary artifacts
- Network
- Application Load Balancer with TLS termination and per-tenant VPC isolation
- Frontend
- React for web; React Native for iOS and Android mobile clients; AWS Amplify for delivery
Security & Compliance
Security and compliance
- SOC 2 Type II
- Independently audited controls across security, availability, and confidentiality
- GDPR
- Alignment with Standard Contractual Clauses for cross-border transfer
- FSMA 204
- Traceability — Critical Tracking Events and Key Data Elements captured across the catering chain
- HACCP
- Aligned food-safety records, inspections, and corrective-action workflows
- Authentication
- SAML and OIDC SSO with MFA enforced for production access
- Encryption
- TLS in transit; AWS KMS / AES-256 at rest; per-tenant key separation
- Secrets
- AWS Secrets Manager with rotation policies
- Audit
- CloudTrail and in-product audit logs for every privileged action
Reliability
Reliability and disaster recovery
- Uptime target
- 99.9%
- Observability
- CloudWatch metrics + alarms, X-Ray tracing, structured application logs
- Backups
- Point-in-time recovery on Aurora, cross-region S3 replication for critical artifacts
Multi-region disaster recovery options
Active–Active Multi-Region
- Target RTO
- ~5 minutes (automated)
- Target RPO
- Near-zero (sub-second)
- Data Tier
- Amazon Aurora PostgreSQL Serverless v2 Global Database, cross-region replication
Times listed above reflect configuration design targets under normal cloud infrastructure operating conditions.
Delivery
Delivery and engineering
- CI/CD
- GitHub Actions with blue/green deployment to ECS Fargate
- Infrastructure-as-code
- AWS CDK
- Release model
- Continuous delivery with feature flags, staged rollouts, and automated rollback
- Environments
- Development, staging, and production environments per tenant cohort
APIs
APIs and integration
- REST APIs
- Inbound passenger and special-meal data; outbound invoice and reconciliation records
- Event hooks
- Webhooks and EventBridge events for production, uplift, inventory, and compliance milestones
- SSO
- SAML / OIDC for identity-provider-managed user lifecycle
- Exports
- Reporting via S3-backed scheduled deliveries and on-demand downloads
Frequently Asked Questions
Where is Galley XAI hosted?
Galley XAI is multi-tenant SaaS on Amazon Web Services with a 99.9% uptime target. Each tenant gets a dedicated Aurora PostgreSQL Serverless v2 database for data isolation, with backend services running on Amazon ECS Fargate.
What security and compliance standards does Galley XAI meet?
SOC 2 Type II audited controls, GDPR alignment with Standard Contractual Clauses, FSMA 204 traceability (Critical Tracking Events and Key Data Elements) and HACCP workflows, SAML/OIDC SSO with MFA, and encryption in transit (TLS) and at rest (AWS KMS / AES-256).
What disaster recovery options are available?
Two multi-region options: DR1 active–passive warm standby with a 10–15 minute target RTO, and DR2 active–active multi-region with a target RTO of about 5 minutes. Both target near-zero RPO using Amazon Aurora PostgreSQL Global Database.
Move forward
Ready to go deeper on architecture or security?
Book time with our team or explore how each Galley XAI module connects across the catering lifecycle.