N-iX partnered with KNIME to transform their on-premises, originally open-source data analytics platform into a secure, multi-cloud Software-as-a-Service (SaaS) platform. By replacing manual customer setups with an automated account-per-tenant architecture, powered by AWS, N-iX eliminated operational bottlenecks and ensured multi-tenant data isolation. To set up the cloud environment, N-iX experts used AWS native services such as Amazon EKS, Amazon RDS, and Amazon S3, and secured over $1 million in AWS Migration Acceleration Program (MAP) funding and credits. N-iX also established continuous 24/7 enterprise-grade L2 support, enabling the customer to reduce onboarding time from weeks to days, scale to over 100 potential tenants, and achieve compliance with ISO 27001 and SOC 2.
KNIME is a software development company that provides a low-code/no-code platform for data science, artificial intelligence, and visual workflow design. The platform enables more than 2,000 enterprise organizations across multiple industries to execute complex ETL/ELT data transformations and analytic workflows.
The customer faced the following challenges:
- Complicated manual setup and management of the analytics platform: The customer needed to commercialize their open-source platform into a scalable SaaS offering to eliminate weeks of manual setup for every customer deployment.
- Limited business growth: The on-premises deployment of the analytics platform prevented the customer from competing with cloud-native analytics platforms.
- Strict security requirements: Each customer required a completely isolated environment to prevent potential data leakage between tenants. The solution needed to meet enterprise-grade security standards, including ISO 27001 and SOC 2 requirements.
Without addressing these challenges, the client could not extend its business to new customers. Furthermore, failing to offer a cloud-based analytics platform would have reduced the customer's competitive position as market demand shifted toward cloud solutions.
AWS provided the optimal foundation for establishing a multi-account organization with dedicated tenant isolation. Each customer receives their own dedicated AWS account with a separate VPC. Workloads run on separate EKS clusters for each tenant, ensuring compute resources, databases, storage, and networking are completely isolated. This approach provides maximum security. If one customer's environment experiences an issue or breach, it does not affect other customers. Additionally, the customer benefited from the AWS MAP program, which completely covered the migration cost.
KNIME chose N-iX as its software development partner because of N-iX's extensive expertise in data modernization, cloud-native services, and enterprise architecture governance. N-iX is a trusted company with a practical background and an AWS Premier Tier Services Partner. Since 2002, N-iX has helped businesses worldwide expand their engineering capabilities and develop successful software products.
N-iX guided the customer through the cloud migration of their on-premises data analytics platform through the following Managed services:
- Product Discovery
- AWS infrastructure management
- Managed cloud compliance services
- Managed support services
Product Discovery
The goal of the Product Discovery was to design the migration journey of the customer’s analytics platform from on-premises to the cloud-based SaaS solution. We designed a multi-tenant architecture where each customer enjoys dedicated, isolated resources backed by robust security frameworks, including ISO 27001 and SOC 2 compliance. This ensured that enterprise customers can confidently adopt the platform without compromising their security posture.
During the Product Discovery, we defined the following core business needs:
- Transition from an on-premises open-source to a cloud-based SaaS model.
- Scalable deployments, addressing the needs of large enterprises.
- Dynamic shutdown of unused workflow executors.
- Simplified onboarding for customers.
As a result of the comprehensive Product Discovery, we provided the customer with the following key deliverables:
- architecture vision document;
- business requirements;
- implementation roadmap;
- operational model;
- team composition;
- budget estimate.
AWS Migration Acceleration Program (MAP)
As a trusted AWS partner, N-iX helped the customer apply for AWS MAP to move to AWS faster and with lower risk. We helped the customer offset $1,075,000 in AWS MAP costs, ensuring 4 months of free development work for the SaaS transformation.
N-iX provided the MAP for the customer, ensuring the customer is ready to move to the cloud. During the Assess phase, we evaluated the customer's existing on-premises platform for cloud migration readiness and defined a comprehensive migration strategy. We analyzed the platform's complex architecture of more than 60 Helm charts, identified dependencies and potential migration risks, and defined the technical approach for moving scattered on-premises customer deployments to a centralized AWS multi-tenant environment.
To validate the migration approach before full-scale execution, we built a proof-of-concept of a tenant running on AWS with the modernized infrastructure components. This PoC proved the viability of the AWS-based architecture. In addition, we prepared comprehensive MAP documentation. Next, we adapted this proven architecture to Azure, establishing a multi-subscription environment that enabled the customer to serve customers in regions where AWS had no presence.
The main goal of the Mobilize phase was to validate the new AWS landing zone, technology, and team readiness using a small subset of workloads. N-iX experts built SaaS from scratch: AWS Control Tower was used for multi-account organization, comprehensive Terraform modules for automated infrastructure provisioning, ArgoCD deployment automation with custom sync waves to handle the complex 60-chart application, and full observability with Prometheus, Grafana, and Loki. To modernize the infrastructure, we migrated PostgreSQL from Kubernetes to RDS and replaced MinIO with S3. Validating these cloud-native patterns with an initial tenant ensures the new architecture is stable before rolling it out to all customers.
In the Migrate and Modernize phase, we ensured the AWS-based SaaS platform is fully operational and compliant with ISO 27001 and SOC 2. This provides a reliable foundation for scaling customer deployments. With the AWS environment established, N-iX continues to automate and optimize deployment and onboarding processes, accelerating new tenant onboarding by 4.6x (from 14 days to 3 days).
AWS infrastructure management
N-iX designed and implemented a multi-tenant, account-per-tenant model that prioritizes security and complete operational isolation between customers. The architecture contains the following features:
- Dedicated tenant isolation. Rather than building a shared multi-tenant solution where all customers share infrastructure, we gave each customer their own dedicated environment. Each customer receives their own dedicated AWS account with a separate VPC. Workloads run on per-tenant EKS clusters, ensuring that compute resources, databases, storage, and networking are completely isolated.
- Central orchestration model. We established a central orchestration account (the SaaS Control Plane) that manages CI/CD pipelines and observability across all tenant environments. This account hosts ArgoCD, which handles deployments to all tenant EKS clusters, and the centralized observability stack built on Prometheus, Grafana, and Loki.
- Secure private connectivity. The orchestration account reaches tenant-side services entirely through private networking — nothing is exposed to the public internet. We implemented AWS PrivateLink to establish secure, private connections between the central management plane and tenant accounts. Access is controlled through IAM roles that follow least-privilege principles, ensuring the orchestration account can deploy and monitor applications but cannot access customer data.
Managed cloud compliance services
N-iX experts helped the customer to achieve compliance with ISO 27001 and SOC 2. This was a critical requirement for selling the platform to enterprise customers, particularly in regulated industries such as banking, healthcare, and government sectors.
N-iX helped conduct a comprehensive infrastructure security assessment aligned with ISO standards, documenting the following:
- Security controls implemented across AWS and Azure environments (encryption, access controls, network isolation, monitoring).
- Operational procedures for incident response, backup and recovery, patch management, and change control.
- Audit logging and compliance monitoring capabilities.
- Data residency and sovereignty measures.
We collected compliance evidence demonstrating how our architecture met the ISO 27001 and SOC 2 requirements.
Managed support services
As production tenants went live, we established enterprise-grade 24/7 support to meet the availability and reliability expectations of the customers who require ongoing incident response. We implemented L2 technical support with 5 engineers rotating in 12-hour shifts, providing continuous coverage across all time zones. We handle complex infrastructure and application issues that go beyond basic user support.
Our experts receive support requests from the following sources:
- The customer-side engineers who work directly with end customers.
- End customers who escalate through the customer's L1 support desk.
- Automated alerts from monitoring infrastructure when issues are detected proactively.
We integrated with the customer's Jira service desk, enabling automated ticket routing based on severity, SLA tracking for response and resolution times, and clear escalation procedures for critical incidents. Our engineers handle a wide range of issues, including the following:
- license configuration changes;
- AWS PrivateLink and networking troubleshooting;
- application issues, such as failed uploads or broken workflows;
- infrastructure incidents affecting performance or availability;
- security and compliance requests.
The successful transition to a cloud-based SaaS platform unlocked new revenue streams and transformed the customer's business model from licensing fees to subscription-based SaaS. Through a trusted partnership with N-iX, the customer gained the following benefits:
- Secured over $1,000,000 in AWS funding and credits through the Migration Acceleration Program, resulting in 4 months of free software development.
- 4x reduced tenant onboarding time: from 14 days to 3 days.
- Enabled sustainable scaling to 100+ tenants through infrastructure automation.
- 80% accelerated mean time to detection through ongoing infrastructure monitoring.
Building a proof-of-concept during an early Assess Phase of MAP was critical for proving the viability of the modernized architecture. Also, modernizing the architecture by replacing self-managed infrastructure with native AWS managed services (such as moving PostgreSQL on Kubernetes to Amazon RDS and replacing MinIO with native S3) reduces operational overhead and is more cost-efficient than a lift-and-shift approach.
N-iX is a global technology partner for Pragmatic AI Software Engineering, the practice of measuring what AI tools actually deliver on your codebase with your engineers before scaling them. With over 2,400 engineers across Europe, the Americas, and APAC, we work with Fortune 500 companies and enterprise technology leaders across finance, manufacturing, supply chain, and retail. For over two decades, we have built and measured software that runs in production.
Contact us
Briefly outline your project or challenge, and our team will respond within one business day with relevant experience and initial technical insights.
Trusted by
Our partners
Compliance
