Platform Architecture iconPlatform Architecture

Multi-Tenant and Scalable Architecture

Batoi Cloud Platform is designed as a governed foundation where Workspaces isolate organizations, Foundation Apps and Member Portals connect work and offer collaboration, and Studios provide modular capability engines - supported by Exchange for governed extensibility.

Platform Architecture Banner

Core Architectural Concepts

Workspaces - Isolation Boundary
Workspaces - Isolation Boundary

A Workspace is a secure, isolated environment per organization. It contains collaboration primitives (Foundation Apps and Member Portal), and Studio-powered capabilities, all governed by unified identity and policy controls.

Key properties
Key properties
Tenant isolation
Role-based access control
Audit logging by default
Foundation Apps
Foundation Apps

Foundation Apps provide the shared collaboration and operational layer used across all Studios, and the governance services through which Systems are controlled.

They do not run inside Systems or become part of their execution runtime.

Studios Extend the Platform

Studios are modular engines that attach to Workspaces. They are adopted as needed without fragmenting identity, governance, or auditability.

RAD Studio
RAD Studio

Build, test, deploy governed applications

Flow Studio
Flow Studio

Orchestrate integrations, workflows, automation

Insight Studio
Insight Studio

Analyze risk, compliance, performance

SecureOps Studio
SecureOps Studio

Embedded DevSecOps and supply-chain security

Extensibility Through Exchange

Batoi Exchange is the governed marketplace for extensions and integrations. Assets are versioned, permission-scoped, and installable per workspace.

Flexible Deployment Without Losing Control

Flexible Deployment Without Losing Control

BCP supports deployment across Batoi-managed, partner-managed, and customer-managed clouds. Governance remains consistent while execution can shift based on cost, locality, and compliance requirements.

Security and Auditability by Design

Security and Auditability by Design

Every workspace operation, policy change, deployment, and integration can produce auditable evidence. SecureOps extends this with SBOM, dependency posture, and security gates within the lifecycle.

faq icon Frequently asked questions

Multi-tenant means multiple organizations use the same platform safely with strong isolation. Each organization operates inside its own Workspace with separate access controls, audit logs, and governed configuration.

Foundation Apps are the primitive blocks that unify applications, integrations, analytics, and assurance. They help connect and collaborate while keeping governance intact.

BCP supports deployment across Batoi-managed, partner-managed, and customer-managed cloud environments. Governance and auditability remain consistent while execution can run where it best fits performance, locality, and compliance needs.