HEXANGO Trust Center

← Trust Center

AWS Architecture

How foretale.ai is built on Amazon Web Services

Last updated June 20, 2026

foretale.ai runs on AWS in us-east-1. Customer data is isolated per organization with dedicated configuration, storage prefixes, and database authorization. The diagram below shows major components and trust boundaries — not every internal service.

Amazon Cognito
API / WebSocket
Amazon Bedrock
AWS Lambda / ECS
RDS · DynamoDB · S3
AWS Secrets Manager

TRUST BOUNDARIES

  • Identity — Amazon Cognito authenticates users; JWT tokens authorize API and WebSocket access.
  • Control plane — PostgreSQL central database and DynamoDB hold organization configuration — not customer analytics datasets.
  • Data plane — SQL Server stores project analytics data; S3 stores files; access is project-scoped.
  • Secrets — AWS Secrets Manager holds database and service credentials — never embedded in application code.