Case Study

Data Centre Modernization & Data Protection for a Leading NBFC

Cloudone helped a fast-growing NBFC build a secure, resilient and compliant infrastructure — ensuring business continuity and protection for critical customer data.

Client Overview

A fast-growing NBFC in the BFSI sector

A leading Non-Banking Financial Company (NBFC) offering digital lending and insurance products — name withheld per client confidentiality agreement. The organisation manages loan origination, disbursement and customer KYC data across a primary data centre and a co-located DR site.

Industry

BFSI — Non-Banking Financial Company (NBFC)

Core Business

Digital lending, insurance products and customer KYC

Environment

Primary data centre and a co-located DR site

The Challenge

Critical gaps put business continuity and compliance at risk

The client’s primary data centre was hosting critical applications on aging infrastructure with significant data-protection and resilience gaps. An internal audit revealed backup failures, lack of tested DR, unencrypted data and no centralised visibility. A storage-array failure that took the loan-disbursement system offline for 9 hours became the trigger for a full infrastructure overhaul.

Key Issues Identified

Backups failing on 9 of 12 critical servers for 6+ weeks
No tested Disaster Recovery plan (last drill failed)
40% of storage volumes unencrypted
Manual, spreadsheet-based tracking
Upcoming RBI IT Governance and DPDP Act compliance
Single data-centre design with no automated failover

Our Solution

A resilient, secure and compliant infrastructure

Cloudone conducted a full data-centre risk assessment and rebuilt the client’s data-protection framework around three pillars — resilient infrastructure, automated backup with verified recovery, and encryption-first data handling — aligned to RBI IT Governance norms and DPDP Act requirements.

Key Technologies

Two-N-designed data centre with redundant power (N+1)
Software-defined storage with automated replication
Enterprise backup with immutable, air-gapped copies
Centralised monitoring and alerting dashboard
Role-based access control (RBAC) and PAM
Encryption at rest and TLS for internet traffic

Implementation

From assessment to a fully resilient environment in 16 weeks

A structured, phased approach — designed around minimal disruption and measurable outcomes.

01Weeks 1–2

Assessment

Full data-centre and backup audit
Identified failing backups, unencrypted storage and SPOFs

02Weeks 3–6

Backup Rebuild

Deployed enterprise backup platform
Implemented automated backup verification and alerting

03Weeks 5–8

Encryption Rollout

Encrypted all storage volumes at rest
Enabled TLS across internal services

04Weeks 7–12

DR Build-Out

Configured replication and failover orchestration
Conducted first live failover drill

05Weeks 11–14

Compliance

Prepared audit-ready documentation
Conducted staff training on data handling

06Post-rollout

Ongoing Continuous Improvement

Quarterly DR drills
Monthly backup checks
Continuous compliance monitoring

The Results

A stronger, more resilient business

The client achieved a compliant, risk-managed and DR-ready environment with validated recovery capabilities — clearing their RBI audit and achieving DPDP Act readiness ahead of the deadline.

3h 40m

Tested RTO (reduced from 12+ hours)

< 15 mins

RPO achieved

100%

Critical servers on verified backups (up from 75%)