Status
Owner	CABELLO MARTOS-ext, Gabino
Stakeholders	The business stakeholders involved in making, reviewing, and endorsing this decision. Type @ to mention people by name
LeanIX Link	Icertis Contract Intelligence

Introduction

Scope & Objectives

The purpose of this document is to describe the architecture of Icertis Contract Intelligence application and the systems it will be integrating with.

List down out of scope items if applicable.

Key Decisions and Requirements

Below table provides the list of non-functional requirements.

Description	Rationale
Single Sign-On (SSO)	As part of SyWay project, a common authentication mechanism (e.g., SAML) is adopted for ease of access and unified user experience.
Users must access Icertis using HTTPS.	As part of SyWay standards, all data in transit must be encrypted.
Data stored in Icertis must be encrypted.	As part of SyWay standards, all data at rest to be encrypted.
Icertis must have appropriate data protection.	Icertis performs data backups regularly so that point in time recovery can perform to recover data. Additional, backups must be replicated to another site to protect against a site disaster.

Terminology

To provide context for application specific terminology.

Application Architecture

Overview

Diagram of application architecture that provides an overview of the application, components and integrating applications.

Application Architecture Components

Provide the details of each and every major component used in the Application Architecture. Below are some of the sample application components provided as a reference.

SAP Web Dispatcher

SAP Cloud Connector

Data Provisioning Agent

SAP Analytics Cloud (SAC) Agent

OpenText Connector

Network Architecture

Optional Section if application requires a network design.

System Landscape

Application	Region	SBX	DEV	INT	UAT	PAR	TRG	PROD
ICertis	EU	-	DEV			Test	DEV	PRD
ICertis	US	-	-	Test				PRD

System Access

Describe how systems will be access by the different end-users.

List down all URL and access details.

Application Security

Authentication

Provide the details of authentication architecture used for the application

Authorisation

Provide the authorization guidelines/principles followed for the application

Communication Security

Provide the details of the communication security controls implemented based on the classification

Data Security

Provide the details of the data security controls implemented based on the classification

Other Controls

Provide the details of any other controls implemented based on the classification

Operation Architecture

Change and Configuration Management

This section will include the details related to change and configuration management of SAP and non-SAP systems.

Monitoring

This section will include the details related to monitoring enabled for the application (System and Application monitoring)

Sizing

Provide the details of sizing approach and the future recommendations

High Availability & Disaster Recovery

Provide the details of HA and DR. List down related metrics like RPO/RTO and availability SLA.

Backup/Restore

Provide the details of Backup/Restore. You may provide a reference to other document or attach a document, if the section contains lot of content

Maintenance Plan

Provide the details of system and application maintenance plan. This should follow the upgrade strategy

Exceptions

This section covers any exceptions to the reference architecture. Some Applications may have limitations and may not meet the Enterprise Architecture, Reference Architecture and IT Policy guidelines. All exceptions should be included in this section.