System

Overview

Cayan's Gateway is Highly Available

  • Hosted at industry recognized colocation provider - Cyxtera (formerly CenturyLink)
  • Multi-site / geo-diverse topology
  • Active/Active Configuration – Boston, MA & Chicago, IL are always receiving traffic in a 50:50 split – continuously testing our DR
  • HA / DR through entire stack – Network, Compute and Storage
  • No single points of failure – Cayan’s gateway is designed with redundant and diverse components/providers – all the way from our DNS providers, to our ISPs, down to our application servers
  • Redundant peer-to-peer connections between sites
  • Automated, self-healing architecture
  • 300 Mb DDOS protection

Monitoring

Cayan’s Gateway is Constantly Being Monitored

  • 24x7x365 live monitoring
  • Subscribe to publicly available, real-time updates @ https://status.cayan.com
  • NOC operations in Boston, MA & Belfast, NI
  • 6500+ sensors capturing Security, Systems, Network, and Transaction event feeds
  • Externally hosted uptime monitoring on all Cayan endpoints, hosted by Pingdom
  • Externally hosted uptime monitoring on all 3rd party gift, check, loyalty, fraud, and payment processing endpoints (eg. First Data, Chase, Vantiv), hosted by Pingdom
  • Active synthetic transaction monitoring on all Cayan and 3rd party endpoints
  • Active monitoring of merchants’ outcomes in real-time via Splunk
  • Real-time incident monitoring for all major ISPs, partnering with DownDetector
  • > 99.998% uptime (measured) over 2017H1
  • < 60s MTTD, < 10s MTTR

Security

Cayan’s Solutions are Designed to be Secure

Scalability

Cayan’s Gateway is Scalable

  • Each data center is certified to handle at least 400% our peak load
  • Designed to scale horizontally and vertically, to meet your traffic needs
  • Constantly being tested in our 1:1 production-equivalent performance lab

Evolution

Cayan’s Gateway is Constantly Improving

  • Continuous Delivery and DevOps approach allows Cayan to release updates multiple times per day, constantly providing value to our customers
  • 30,000+ automated regression tests ensure no functional regressions make their way to production
  • Automated vulnerability and performance tests ensure we’re always handling our non-functional requirements
  • Blue/Green and Canary release strategies, combined with our holistic production monitoring, enable controlled field-testing with no negative side-effects for our merchants

Payment Connections

Credit Processor Solutions

  MSR Certified EMV Certified
Countertop
EMV Certified
Handheld/Mini
Chase  
Elavon  
First Data
Global Payments    
Heartland    
TSYS  
Vantiv  
Worldpay  

Stored Value/Loyalty Solutions

  Gift Loyalty
Cayan Stored Value
Chase Paymentech  
Clutch  
FirstData Valuelink Premium  
FirstData Valuelink Standard  
GiveX  
Opticard
Smart Transaction Systems (STS)  
Stored Value Systems (SVS)  
Valutec  
Worldpay  

Additional Gateway Solutions

  • Check processing & verification: Sage
  • Fraud & risk management: Kount
  • Customer surveys: TruRating