Deployment Architecture

TruePortAI is deployed as a set of independently scalable services across AWS (primary cloud) and On-Premise/VPC (for the ML analytics engine). All services are stateless; state is held in MongoDB Atlas and Redis.

Deployment Topology

Lambda Function Configuration

`platform-backend` Lambda

Setting	Value
Runtime	`python3.11`
Handler	`zappa_entry.handler` (Mangum/Zappa)
Memory	512 MB
Timeout	30 seconds
Concurrency	100 (reserved)
VPC	No (public subnet — Atlas IP allowlist)
Environment	`MONGO_URI`, `SECRET_KEY`, `SMTP_*`, `CORS_ORIGIN_REGEX`

`trueportai-services` Lambda

Setting	Value
Runtime	`python3.11`
Handler	`zappa_entry.handler` (Mangum/Zappa)
Memory	512 MB
Timeout	30 seconds
Concurrency	200 (reserved)
VPC	Yes (private subnet with ElastiCache access)
Environment	`MONGO_URI`, `REDIS_URL`, `SECRET_KEY`

CloudFront Distribution

CloudFront Settings:

SSL/TLS: ACM certificate — *.trueportai.com
HTTP/2: Enabled
Compression: Gzip + Brotli
Cache Policy: TTL 0 for API paths; 86400s for static assets
Security Headers: HSTS, X-Frame-Options, CSP via Lambda@Edge

CI/CD Pipeline

Analytics Engine — On-Premise Deployment

Model Repository Layout (Triton)

/models/
├── pii-ner-roberta/
│   ├── config.pbtxt          # Triton model config
│   └── 1/
│       └── model.pt          # Serialized PyTorch model
├── bias-deberta-v3/
│   ├── config.pbtxt
│   └── 1/
│       └── model.pt
├── injection-distilbert/
│   ├── config.pbtxt
│   └── 1/
│       └── model.pt
└── exfil-regex-entropy/
    ├── config.pbtxt
    └── 1/
        └── model.py          # Python script backend

MongoDB Atlas Configuration

Atlas Settings:

Tier: M10 (production), M2 (staging/dev)
Region: us-east-1 (primary), eu-west-1 (replica for EU customers)
Backup: Continuous cloud backup enabled
Encryption: Encryption-at-rest enabled
Network: IP Access List — only Lambda NAT gateway IPs and analytics engine IPs

Environment Configuration

Variable	Service	Description
`MONGO_URI`	Both	MongoDB Atlas connection string
`MONGO_DB_NAME`	platform-backend	`saas_platform_core`
`MONGO_DB_NAME`	trueportai-services	`trueport_ai`
`SECRET_KEY`	Both	HS256 JWT signing key (32+ bytes random)
`REDIS_URL`	trueportai-services	`redis://:{password}@{host}:6379/0`
`SMTP_HOST_URL`	platform-backend	SMTP server hostname
`SMTP_HOST_PORT`	platform-backend	`587` (STARTTLS)
`SMTP_HOST_UID`	platform-backend	SMTP username
`SMTP_HOST_PWD`	platform-backend	SMTP password
`CORS_ORIGIN_REGEX`	platform-backend	Allowed origin pattern
`STORAGE_PROVIDER`	platform-backend	`S3`, `AZURE`, `GCP`, or `LOCAL`
`AWS_ACCESS_KEY_ID`	platform-backend	IAM key for S3 access
`AWS_SECRET_ACCESS_KEY`	platform-backend	IAM secret for S3 access
`AWS_S3_BUCKET`	platform-backend	Tenant log archive bucket
`AWS_REGION`	platform-backend	`us-east-1`

Scaling Strategy

Service	Scale Trigger	Mechanism
platform-backend	Request volume	Lambda auto-concurrency
trueportai-services	Request volume	Lambda auto-concurrency (max 1000)
MongoDB	Data volume / IOPS	Atlas auto-scaling
Redis (ElastiCache)	Memory usage	Manual tier upgrade
Analytics Engine	Processing queue depth	Horizontal — add GPU nodes
CloudFront	Automatic	AWS-managed globally

Disaster Recovery

Component	RPO	RTO	Strategy
MongoDB Atlas	0s	< 5 min	Replica set auto-failover
Lambda	0s	< 1 min	Multi-AZ by default
S3 Logs	0s	N/A	Multi-AZ durable storage
Analytics Engine	1h	4h	Manual failover to backup node
Redis	Minutes	< 15 min	ElastiCache Multi-AZ