Self-Storage Platform Technical Documentation
Hardware Integration | Cloud Architecture | Information Siloing | Installation Guide
System Architecture Overview
On-Site Hardware
IP Cameras
Smart Gates
Smart Locks
IoT Sensors
HVAC Systems
IoT Control Box
LOCAL SERVER
Edge Computing Node
Cloud Platform (Partitioned)
Auth & Identity
Core Services
CRM & Marketing
Business Operations
Billing Engine
Business Operations
Access Control API
Security Partition
Security Monitoring
Security Partition
Facility Management
Operations
AI/ML Kernel
Core Services
Integration Hub
Core Services
Stakeholder Access
Facility Owner
Full business visibility
Facility Manager
Day-to-day operations
Security Agency
Security alerts only
Customer
App access & payments
Security Isolation
Security Agency has NO access to CRM, Billing, or Customer PII.
Data Flow Architecture
Hardware
Sensors/Locks/Cameras
→
Edge Node
Local Processing
→
Cloud Gateway
Secure Tunnel
→
Service Mesh
Partitioned Services
→
Client Apps
Web/Mobile/Dashboard
Information Flow & Siloing
Security Silo
Security Partition (Isolated Cloud)
STAKEHOLDERS
✓ HAS ACCESS
Access logs
Camera feeds
Intrusion alerts
Gate/lock status
✗ NO ACCESS
Operations Silo
Operations Partition (Shared Cloud)
STAKEHOLDERS
✓ HAS ACCESS
Unit status
Maintenance tickets
Environmental data
Schedules
✗ NO ACCESS
Business Silo
Business Partition (Encrypted)
STAKEHOLDERS
✓ HAS ACCESS
Revenue & billing
Financial reports
Pricing analytics
ROI metrics
✗ NO ACCESS
Customer Silo
Customer Partition (Public API)
STAKEHOLDERS
✓ HAS ACCESS
Own unit access
Own payments
Profile data
Notifications
✗ NO ACCESS
🔒 Security Agency Isolation: Zero network path to CRM or Billing. Physical network segmentation enforced.
Installation Activity Flowchart
Week 1-2
Phase 1: Foundation
Week 3-4
Phase 2: Hardware
▼
Access Control
☁ Access API (Cloud)
→ Install smart locks
→ Mount gate controller
→ Wire to IoT box
Security System
☁ Security Partition (Cloud)
→ Mount IP cameras
→ Configure recording
→ Test alerts
Environmental Sensors
☁ Facility Mgmt (Cloud)
→ Install sensors
→ Set thresholds
→ Verify readings
HVAC Integration
☁ Climate Module (Cloud)
→ Connect HVAC
→ Configure zones
→ Test control
Week 5
Phase 3: Software
▼
Billing Setup
☁ Billing Engine (Cloud)
→ Connect Stripe
→ Configure cycles
→ Enable auto-pay
Customer Portal
☁ Portal (Cloud)
→ Customize branding
→ Setup booking flow
→ Test journey
Notifications
☁ Notification Service (Cloud)
→ Configure SMS
→ Setup emails
→ Enable push
Reporting
☁ Analytics (Cloud)
→ Configure dashboards
→ Setup reports
→ Train owner
Week 6
Phase 4: Go-Live
▼
Staff Training
☁ Training Portal (Cloud)
→ Manager training (4hr)
→ Staff training (2hr)
→ Provide docs
Customer Migration
☁ CRM (Cloud)
→ Send welcome emails
→ Issue access codes
→ Migrate payments
Verification
☁ All Systems
→ End-to-end test
→ Access verification
→ Performance baseline
Handoff
☁ Support Portal (Cloud)
→ 30-day support
→ Weekly check-ins
→ Optimization review
Summary
5-6 Weeks
Total Duration
4 Major
Hardware Steps
4 Steps
Software Config
6 Hours
Training Time
Cloud Partition Architecture
Core Services Partition
Access: All authenticated users
Isolation: Shared tenant with RBAC
SERVICES
Authentication
Authorization
AI/ML Kernel
Integration Hub
API Gateway
Deployment
Multi-region, auto-scaling
Security Partition
Access: Security Agency + Managers only
Isolation: Physically isolated network
SERVICES
Access Control API
Security Monitoring
Camera Management
Alert Engine
Audit Logs
Deployment
Dedicated instances, encrypted at rest
Business Operations Partition
Access: Owners + Finance only
Isolation: Encrypted partition with PCI compliance
SERVICES
CRM System
Billing Engine
Revenue Analytics
Marketing Automation
Financial Reports
Deployment
SOC2 compliant infrastructure
Operations Partition
Access: Managers + Staff
Isolation: Standard tenant isolation
SERVICES
Facility Management
Maintenance System
IoT Data Processing
Environmental Monitoring
Staff Management
Deployment
Shared compute with data separation
Customer Partition
Access: Customers (own data only)
Isolation: Public API with rate limiting
SERVICES
Customer Portal
Mobile App Backend
Booking System
Payment Gateway
Notification Service
Deployment
CDN + Edge caching
Network Isolation Diagram
Public Internet
Customers, Owners
→
API Gateway
Auth + Rate Limit
→
Service Mesh
Internal routing
→
Business DB
Operations DB
Security DB (Isolated)
Security DB has no network path to Business/CRM databases | Audit logs on all cross-partition calls