PayEx stays on top by implementing a unique Kubernetes payment solution

CHALLENGES

Be faster and more secure

To further strengthen its digital offer and meet their customers’ demands for modern and innovative ways to make payment PayEx was looking for a solution that could help them deploy and deliver new services in a reliable, scalable and secure way. They looked for ways to optimize and provide added business values leveraging the latest technologies while increasing efficiency and lowering their total cost of operation.

Above all, PayEx had an urge to scale their organization and deploy a new solution that could modernize their PCI DSS (Payment Card Industry Data Security Standard) service offered through their 60,000+ already deployed terminal units.

As Basefarm is specialized in managing PCI DSS platforms and offer their services in Azure as well as other major cloud providers, PayEx turned to them. Basefarm was an existing reliable and close partner for PayEx and had been hosting their PCI DSS on-premise environment in a secure way since 2011. During these years PayEx has never had a security incident, a fact that proved Basefarm’s competence in this area.

Care and Compliance

PayEx, as a financial company, is obliged to follow a set of very strict rules defined by each operating country financial supervisory authority, these conventional rules have not changed as fast as the technology. PayEx had no previous productions environments in the cloud and wanted to start their cloud journey by implementing their payment terminals to a new platform.

Basefarm had to find a solution that could build trust and loyalty and could ensure that PayEx had all the governance routines under control.

SOLUTION

Kubernetes in the cloud

Basefarm investigated different solutions to fit PayEx current structure and platform operations in a way that aligned with existing on-premise operation. The proposal offered was that PayEx should implement a public cloud solution in Azure based on Kubernetes technology. To deploy and manage the containerized applications, Basefarm offered a fully managed Azure Kubernetes service with Payment Card Industry Data Security Standard (PCI-DSS ) Compliance for continuous integration and delivery experience with enterprise-grade security.

Platform Operation in Azure with PCI-DSS Compliance

The architectural framework is designed to help PayEx deploy and operate the payment processing system and credit card handling solution in Microsoft Azure. This automation solution helped PayEx adopt Azure solutions, showcasing how to deploy a secure and compliant workload while adhering to the PCI DSS compliance standard.

Two environments were established in Azure: Stage and Production. PCI-SS requirements were addressed and documented.
Platform Operations PCI-DSS was established, and 24/7 support activated.
First QSA (Qualified Security Assessor) test on Azure

Market Leader

After implementing this unique Kubernetes solution, PayEx not only remains a leading company in the Nordic online payment market, but they have also strengthened its digital offer and secured to stay on top continuing to create value for their customers in the future. ‘’This solution has made a big difference for us, and what is so unique about this solution, not only for PayEx, but to our industry as a whole, is that Kubernetes technology is used in Azure with PCI DSS Compliance.

With this solution we will be able to continue to deliver secure and innovative payment solutions with high service level to our customers’’ – Helge Dahl, Business Architect at PayEx

PROJECT METHODOLOGY

Minimum viable Product approach (MvP):

The implementation of a Public Cloud solution in Azure started with an analysis of PayEx needs and motivation for moving to the cloud. The Pilot environment test showed that the solution matched PayEx needs and requirements and PayEx went on to build a full-size implementation. Being in the forefront using a new technique, one of the major challenges during the implementation phase was to adapt the financial requirements to the cloud.

Infrastructure as code (IaC):

The new improved code was approved and tested in the Staged environment and PayEx was completely involved in application configuration and configuration of Kubernetes workflows in the Stage environment. With just a change in variables, a smooth, efficient shift was made from the Stage to the Production environment.

Unique Partnership:

Basefarm and PayEx worked close together with PayEx through the process. An open, transparent and trust based working methodology was implemented. This led to a successful and quick turnaround from first conception to Production environment.
Today, Basefarm operates and takes responsibility for PayEx on-prem environment as well as their public cloud-based environment. In doing this PayEx environment benefits from parallel resource and competence distribution.

BUSINESS OUTCOME

Post full-size implementation, PayEx feels that the project has matched their needs and requirements, the collaboration has worked seamlessly and PayEx can deploy new services in a reliable, scalable and secure way.
The advantage that comes with a cutting-edge solution like Azure Kubernetes Services is that PayEx can continue to be in the forefront. The company is seen as a modern workplace and can continue to attract and retain talented employees with the right skillset in the future.
The project sees great advantages with a cloud solution compared to an on-prem solution.
‘’With this technology, PayEx does not have to make large investments in hardware, it is a cost-effective solution, and they can escalate horizontally.”

“Our motivation for cloud and Kubernetes is mainly described by these keywords: scalability, redundancy, testability and delivery. We are still very early in this journey. Short term our customers will not really notice whether the service is provided on the cloud/Kubernetes platform or the on-prem platform. But we expect that we will be able to provide better performance, stability and quality at a higher delivery phase to our clients with this new platform.”

– Helge Dahl Business Architect at PayEx

‘’We continue to have a close contact with Basefarm on a daily basis since there are constant developments and adjustments to be made. This means that we put a lot of our core business in the hands of Basefarm. They take care of development, support and security. But we have been their customers for twelve years now and it has worked well so far. We have great confidence and look forward to continuing our cloud journey with them’’

– Helge Dahl Business Architect at PayEx

Looking ahead

In the future PayEx will continue to implement more sensitive PayEx operations to the cloud using container technology. For PayEx high availability, stable operations and security are the most important criteria for success.

The close collaboration with Basefarm is expected to continually improve and strengthen PayEx services and offer to their customers.

PayEx was founded on Gotland by the entrepreneur Max Hansson in 1972. The group was for a long time one of Gotland’s largest employer. Max Hansson lived by Ernest Hemingway’s saying, “No man is an island”, which he made his own by adding: “No company either”.
Almost 50 years after the company was founded, this motto is truer than ever.

Today, PayEx is owned by Swedbank, but the entrepreneurial spirit lives on. It is one of the leading companies in payment solutions with operations in Sweden, Norway, Denmark and Finland and customers in several European countries.
PayEx offer safe, sustainable and seamless omnichannel products and services that make payments easier wherever merchants and customers meet – both in-store and online. They process more than 350 million payments per year and meet customers where they want to pay, regardless of the channel or payment method.

In recent years, an increased usage of online services, such as shopping and travel has increased the use of online mobile payment. In addition, the digital infrastructure that has emerged has radically simplified the possibility of developing financial services. This development has created a demand for modern and innovative financial services and especially payment solutions.

About Basefarm

Basefarm is a European operations provider that creates market leaders by integrating key competencies for digital transformation of Big Data, Cloud Services and Information Security into a service offering. The company provides strategic advice, architecture and implementation together with management and operation of solutions on several different cloud platforms. The business was founded in 2000 in the Nordic countries and today there are 760 leading engineers and consultants working in Norway, Sweden, the Netherlands, Germany and Austria.

Basefarm was ranked highest in Whitelane’s IT Outsourcing study Nordics 2020 and Basefarm positioned as Nordic leader in Basefarm positioned as Nordic leader in Private / Hybrid Cloud – Data Center service and solutions by ISG Provider Lens. According to a survey from Radar, where 1,000 organizations were asked to assess 200 different suppliers, Basefarm took first place in the IT infrastructure and operations category 2020, 2019 and 2018.

In August 2018 Basefarm was acquired by the Orange Group, a leading global telecommunications operator, to reinforce the cloud expertise of its enterprise division Orange Business Services. For more information, go to www.orange-business.com or follow us on LinkedIn, Twitter and our blogs.