Engineering blog

How we build what we run

The architecture behind our products, written by the engineers who built it: the design, the trade-offs, the security, and the real AWS bill.

Sign-in flow: the page picks the organisation from the email domain, each organisation signs in against its own pool, and the API authorizers read the organisation from the token.

Latest

One sign-in for many companies, without trusting the browser

How Dhilabs HR serves several organisations from one site: a Cognito user pool per organisation, the organisation read from the token's signature, and an API authorizer that checks RS256 with nothing but the Python standard library.

Architecture
Security
AWS Cognito
Multi-tenant

2 Oct 20269 min readDHILabs engineering

Read the post

System diagram of the HR platform: CloudFront and WAF in front of two API stacks, Cognito sign-in, Lambda functions, DynamoDB tables, Bedrock and SES.

An AI HR platform on serverless AWS for about ₹1,400 a month

The full architecture of Dhilabs HR: policy answers on Amazon Bedrock, leave, attendance, payroll and a help desk on Lambda and DynamoDB, the security model, how it is delivered, and the real AWS bill.

Architecture
Generative AI
Serverless
Cost

1 Oct 202612 min readDHILabs engineering