Aventura, Florida · serving clients across the United States (305) 404-9404Toll-free (800) 767-8566Emergency? Get a call within 1 hour
Financial risk analytics

A 150 TB Microsoft SQL Server database, live in two data centers on a petabyte of storage

A balance-sheet risk analytics firm that serves banks and financial institutions, with models for interest-rate risk, net interest income and valuation. A leader in its segment.

Scale
1 PB storage, 150+ TB database, 1 TB+ RAM and 128 cores per production server, New York + New Jersey, SOC 2
Engagement
Design, build, colocation and operation

The challenge

The firm's analytics database had grown past 150 terabytes, and its clients' decisions depended on it. It needed two live copies, one active and one standby, plus backups it could restore from any day, week or month, without a single point of failure anywhere.

What our team delivered

  • About one petabyte of storage, designed and built end to end
  • Two live copies of the database, active and standby, on Microsoft SQL Server Enterprise
  • SQL Server Enterprise availability design with an active and a standby copy, so the database survives the loss of a server, a storage array or a site
  • Enterprise-grade SAS SSDs for both live copies, in custom RAID 5 arrays behind independent RAID controllers
  • Backup copies on enterprise iSCSI storage with HPE MSA controllers, kept on daily, weekly and monthly retention
  • Production servers with more than 1 TB of RAM and 128 cores each
  • State-of-the-art compute hardware for the firm's mathematical and risk calculations
  • Redundant colocated data centers in New York and New Jersey
  • Redundant everything: firewalls, switches and power supplies, so the platform can recover from a disaster
  • Guided the firm through its entire SOC 2 effort and its other compliance certifications, and took care of the regulatory requirements behind them: controls, evidence and documentation

Result

A database of more than 150 TB running live in two places at once, with tested backups on three retention tiers and no single point of failure from the firewall to the power supply. The same team carried the firm through SOC 2 and its other required certifications. It is the reference for our SQL Server work.

Per-rack bandwidth, 10G to 100G

Aggregate uplink capacity from one rack to the spine, with four uplinks per rack. 10G SFP+ (10GBASE-SR, IEEE 802.3ae) gives 40 Gb/s, 25G SFP28 (25GBASE-SR, 802.3by) gives 100 Gb/s, and 100G QSFP28 (100GBASE-SR4, 802.3bm) gives 400 Gb/s. Illustrative.

Per-rack bandwidth, 10G to 100GBar chart of per-rack uplink bandwidth: 40 gigabits per second with 10G SFP+, 100 with 25G SFP28, 400 with 100G QSFP28, four uplinks per rack in each case.Rack-to-spine capacity by optic generation0100200300400Gb/s40 Gb/s10G SFP+4 × 10G100 Gb/s25G SFP284 × 25G× 2.5400 Gb/s100G QSFP284 × 100G× 4

Defense in depth, on a loop

Every device on your network sits behind a monitored firewall with two internet circuits, so attacks are stopped at the door and a provider outage does not stop the business.

Defense in depth, on a loopDiagram of a protected corporate network. The internet reaches an edge firewall over two redundant ISP circuits. Behind the firewall a core switch feeds PoE access switches serving Wi-Fi access points, workstations, IP phones and cameras with door access control, plus a server and iSCSI storage cluster and an encrypted VPN link to the cloud. Gold packets show legitimate traffic passing; red threat packets are stopped and dropped at the firewall. On a loop, ISP circuit A goes down and traffic fails over to ISP circuit B, then the circuit is restored. InternetISP AISP BFirewallCloudVPN tunnelCore switchServersiSCSI storagePoE switchPoE switchWi-FiWorkstationsIP phonesCCTV · doorsISP A downRerouted to BLegitimate trafficThreat, blockedPROTECTED NETWORK

Super Intelligence data flow

Every request is classified by sensitivity, so confidential data stays on models inside your walls while routine work can use the best frontier AI.

Super Intelligence data flowEmail, documents, phone calls, ERP and CRM records and sensor data enter a secure gateway that classifies each request by sensitivity. Sensitive requests are answered by local models inside the firewall, internal ones by a private cloud, and general ones by frontier models from leading US AI labs. Results flow back into ERP, CRM, dashboards and to people.SOURCESGATEWAYMODEL TIERSYOUR SYSTEMSEmailDocumentsPhone callsERP / CRMSensorsSecuregatewaysorts bysensitivityLocal modelsIn your firewallPrivate cloudYour own tenantFrontier modelsleading US AI labsERPCRMDashboardsPeopleSensitive: stays localInternal: private cloudGeneral: frontier model

Frequently asked questions

Direct answers to the questions we hear most. Something else on your mind?

Send us a message
How is a 150 TB database kept available?

It runs as two live copies, one active and one standby, on Microsoft SQL Server Enterprise. Both sit on enterprise SAS SSDs in custom RAID 5 arrays behind independent RAID controllers, in redundant colocated data centers in New York and New Jersey. Firewalls, switches and power supplies are redundant too, so there is no single point of failure.

How are the backups organized?

Backup copies live on enterprise iSCSI storage with HPE MSA controllers and are kept on daily, weekly and monthly retention. That lets the firm restore from any day, week or month. The case reports tested backups on three retention tiers.

What did the project include for compliance?

The same team guided the firm through its entire SOC 2 effort and its other compliance certifications. That covered the controls, evidence and documentation behind the regulatory requirements.

Do you know if your company is safe?

Speak with a security engineer today. The first assessment call is free and confidential.

CallFree assessment