BAT Inhouse App
Large enterprises often struggle with fragmented systems and data silos across HR, IT, and analytics. This case study presents the BAT Inhouse App for British American Tobacco: a microservices platform integrating 8+ systems (SAP Planet 8/9, Cherwell HR/IT, Power Apps, SharePoint, data lake) on Azure Service Fabric with API Gateway, ARM templates, and 99.9% data quality. For architects and tech leads, it illustrates integration patterns, multi-database design, and real-time notification at scale.
BAT Inhouse App Gallery
Project Overview
The BAT Inhouse App represents a comprehensive enterprise application - a microservices platform that streamlines British American Tobacco's internal operations. This enterprise system integrates 8+ different enterprise systems, providing unified access to HR, IT, analytics, and business intelligence across the entire organization.
The Challenge
British American Tobacco needed a unified platform to integrate their fragmented enterprise systems including SAP Planet 8/9, Cherwell HR/IT, Power Apps, SharePoint, and various analytics platforms. The organization faced significant challenges with data silos, inconsistent user experiences, and the need for real-time business intelligence across multiple departments. They required a solution that could handle enterprise-scale operations while maintaining security, performance, and reliability.
The Solution
The BAT Inhouse App leverages Azure Service Fabric microservices architecture to create a unified enterprise platform. The system integrates all existing enterprise systems through a state-of-the-art Azure API Gateway with ARM templates, security certificates, and advanced routing capabilities. Built with .NET Core and featuring multi-database architecture (Azure SQL + Cosmos DB), the platform provides real-time data synchronization and comprehensive analytics capabilities.
Key Features
Technical Architecture
The system employs a microservices architecture with Azure Service Fabric hosting, multi-database architecture (Azure SQL + Cosmos DB), and comprehensive third-party integrations. The CI/CD pipeline, built with Azure DevOps and ARM templates, ensures zero-downtime deployments and continuous integration of new features. The platform features advanced security with enterprise-grade authentication and authorization.
Business Impact
This revolutionary platform has transformed BAT's approach to enterprise system management, creating a unified experience where employees can access all necessary systems through a single interface. The integrated analytics platform provides real-time business intelligence, while the automated data synchronization has reduced manual processing by 70%. The platform handles 5M+ records per hour with 99.9% uptime, serving thousands of employees across multiple departments.
Technology Stack
Frontend & UI
Backend Framework
Database & Storage
Cloud & Hosting
DevOps & CI/CD
Monitoring & Analytics
Analytics & Intelligence
APIs & Integration
Security & Authentication
Communication & Notifications
Other Technologies
C4 Architecture Diagram
Architecture Overview
Enterprise Frontend Portal
Modern Angular-based enterprise portal providing BAT employees with unified access to all internal systems, HR services, IT support, and business intelligence across all devices and departments.
Comprehensive web application built with Angular and TypeScript featuring unified dashboard, role-based access control, and real-time data synchronization. Includes OAuth 2.0 authentication, multi-tenant support, and personalized user experiences for different BAT departments and employee levels.
Optimized mobile experience ensuring employees can access all BAT systems on-the-go. Features touch-friendly interfaces, offline capability for critical functions, and push notifications for important updates, approvals, and system alerts across all mobile devices.
Live data updates across all integrated systems, instant notifications for approvals and workflows, and real-time collaboration features. Supports thousands of concurrent employees with efficient WebSocket connections and automatic reconnection for critical business operations.
PWA implementation enabling offline access to critical business functions, push notifications for approvals and alerts, and app-like experience across all devices. Features service workers, background sync, and responsive design optimized for enterprise usage patterns.
Azure API Gateway & Management
Azure API Gateway with ARM templates, security certificates, and advanced routing capabilities providing enterprise-grade API management and microservices orchestration.
Enterprise-grade API gateway with ARM templates for infrastructure as code, security certificates for compliance, and advanced routing for microservices orchestration. Includes rate limiting, request transformation, and comprehensive API versioning for seamless integration.
Advanced traffic distribution across multiple service instances with health checks and circuit breaker patterns. Ensures 99.9% uptime during peak operations and automatic failover for critical business processes with enterprise-scale reliability.
End-to-end security with OAuth 2.0, JWT tokens, and Azure Active Directory integration. Implements comprehensive security headers, audit logging, and threat protection ensuring enterprise-grade security for all API communications and data access.
Comprehensive API monitoring with real-time metrics, performance tracking, and usage analytics. Features request/response logging, error tracking, and automated alerting for API performance degradation and security incidents across all integrated systems.
Azure Service Fabric Microservices
Scalable microservices architecture orchestrated by Azure Service Fabric handling specific business domains including HR management, IT services, analytics processing, and enterprise system integrations.
High-performance microservices built with .NET Core featuring domain-driven design, dependency injection, and comprehensive business logic. Implements CQRS pattern, event sourcing, and cross-cutting concerns for enterprise workflows and business processes.
Specialized microservices for HR management, IT support, analytics processing, and enterprise integrations. Includes background job processing, event-driven architecture, and machine learning for business intelligence and operational optimization.
Distributed transaction management using Saga pattern for coordinating complex business workflows across multiple microservices. Implements choreography-based sagas for autonomous service coordination and orchestration-based sagas for centralized workflow management ensuring data consistency and business process integrity.
Comprehensive integration layer handling SAP Planet 8/9, Cherwell HR/IT, Power Apps, SharePoint, and Microsoft Teams connectivity. Features service discovery, API management, and event processing for seamless enterprise system integration.
Advanced analytics platform providing comprehensive reporting on business operations, employee productivity, and system performance. Includes custom dashboards, real-time alerts, and comprehensive analytics for strategic decision-making.
Intelligent notification system handling approvals, alerts, and system notifications. Supports email, SMS, Teams, and push notifications with intelligent routing, delivery tracking, and fallback mechanisms for critical business communications.
Multi-Database Data Infrastructure
Robust multi-database architecture optimized for enterprise operations, employee data management, and real-time business intelligence processing with Azure SQL and Cosmos DB.
Enterprise cloud database providing secure storage for employee information, business transactions, and operational data. Features automated backups, high availability, and advanced indexing for optimal query performance during peak business operations.
Globally distributed NoSQL database for document storage, real-time analytics, and business intelligence data. Implements intelligent partitioning, global distribution, and comprehensive data consistency for enterprise-scale operations.
High-performance in-memory caching system providing ultra-fast access to employee data, business metrics, and system information. Implements intelligent cache invalidation and distributed caching for improved system performance and reduced database load.
Modern ORM framework providing efficient data access patterns, query optimization, and database abstraction. Features code-first migrations, lazy loading, and comprehensive data validation for enterprise operations and business transactions.
Comprehensive backup strategy with automated daily backups, point-in-time recovery, and disaster recovery procedures. Implements geo-redundant storage, automated failover, and 99.9% data availability with RTO of 15 minutes and RPO of 5 minutes for critical business data.
Enterprise System Integrations
Comprehensive integration layer managing real-time data synchronization with 8+ enterprise systems, event-driven processing, and advanced API management for seamless business operations.
Seamless integration with SAP enterprise resource planning systems providing real-time data synchronization, employee information management, and business process automation. Features custom connectors, data transformation, and comprehensive error handling for enterprise operations.
Comprehensive integration with Cherwell IT Service Management and HR systems providing automated ticket management, employee onboarding, and IT service delivery. Includes workflow automation, approval processes, and real-time status updates.
Integration with Microsoft Power Apps, Power BI, and Power Automate providing low-code business applications, advanced analytics, and workflow automation. Features custom connectors, data synchronization, and comprehensive business intelligence capabilities.
Document management and collaboration platform integration providing centralized document storage, version control, and team collaboration features. Includes automated workflows, approval processes, and comprehensive content management capabilities.
Analytics & Data Lake Platform
Comprehensive analytics platform with Azure Data Lake integration, real-time data processing, and advanced business intelligence capabilities for enterprise decision-making and operational optimization.
Scalable data storage solution for enterprise analytics, business intelligence, and machine learning workloads. Features hierarchical namespace, security integration, and comprehensive data governance for enterprise-scale analytics operations.
Advanced analytics platform providing real-time business intelligence, predictive analytics, and operational insights. Includes machine learning models, data visualization, and comprehensive reporting for strategic decision-making and business optimization.
Comprehensive business intelligence integration providing interactive dashboards, advanced analytics, and data visualization. Features automated report generation, real-time data connections, and comprehensive business intelligence capabilities.
AI-powered analytics system for business pattern prediction, demand forecasting, and operational optimization. Provides comprehensive insights with custom models, predictive analytics, and powerful machine learning capabilities for business intelligence.
Security & Compliance Framework
Enterprise-grade security infrastructure ensuring comprehensive protection of employee data, business transactions, and system integrity with multi-layered defense mechanisms and regulatory compliance.
Enterprise authentication system supporting thousands of BAT employees across multiple departments and locations. Implements OAuth 2.0, OpenID Connect, JWT tokens with secure expiry, refresh token rotation, and MFA support for enhanced security.
Comprehensive security framework with Azure Security Center, threat detection, and audit logging. Implements OWASP Top 10 protection, SQL injection prevention, XSS filtering, and network security groups with least-privilege access for enterprise data protection.
AES-256 encryption for data at rest in Azure SQL Database and Azure Storage. TLS 1.3 for all data in transit with certificate pinning. Field-level encryption for sensitive employee data (PII) using Azure Key Vault with automatic key rotation every 90 days.
Comprehensive compliance framework supporting GDPR, enterprise regulations, and industry standards. Implements data residency controls, consent management system, automated compliance reporting, and 7-year audit log retention for regulatory adherence.
Architecture Benefits
The BAT Inhouse App architecture delivers a high-performance, scalable platform that processes 5M+ records per hour with 99.9% uptime, integrates 8+ enterprise systems in real-time, and provides BAT employees with unified access to all internal systems through a single interface. The system handles enterprise-scale operations while maintaining security, performance, and reliability. The architecture supports thousands of employees across multiple departments with comprehensive integrations, real-time analytics, and advanced threat protection ensuring mission-critical reliability for BAT's enterprise operations.
Engineering Challenges
Complex Enterprise System Integration with Saga Pattern
Challenge: Integrating 8+ different enterprise systems including SAP Planet 8/9, Cherwell HR/IT, Power Apps, SharePoint, and Microsoft Teams while maintaining data consistency, real-time synchronization, and business process integrity across distributed microservices architecture with zero data loss and 99.9% reliability.
Implemented comprehensive Saga pattern for distributed transaction management across microservices. Developed both choreography-based sagas for autonomous service coordination and orchestration-based sagas for centralized workflow management. Used Azure Service Bus for reliable message delivery and implemented compensation patterns for rollback scenarios ensuring business process integrity.
Built comprehensive integration layer using Azure API Management with rate limiting, request transformation, and circuit breaker patterns. Implemented custom connectors for SAP Planet 8/9, Cherwell HR/IT, and Microsoft Power Platform with data transformation pipelines and comprehensive error handling for enterprise operations.
Developed event-driven architecture using Azure Event Grid and Service Bus for real-time data synchronization across all integrated systems. Implemented conflict resolution algorithms, data validation pipelines, and custom synchronization engine ensuring 99.9% data quality and consistency across 8+ enterprise systems.
Implemented comprehensive monitoring of all system integrations with health checks every 30 seconds. Automated alerting for API failures, data inconsistencies, and performance degradation with retry policies using exponential backoff and dead letter queues for failed messages ensuring system reliability.
Azure API Gateway Implementation
Challenge: Implementing enterprise-grade Azure API Gateway with ARM templates, security certificates, and advanced routing capabilities while ensuring zero-downtime deployments, comprehensive security compliance, and seamless microservices orchestration for thousands of concurrent users.
Designed and implemented comprehensive ARM templates for Azure API Gateway deployment with automated resource provisioning, security certificate management, and environment-specific configurations. Implemented blue-green deployment strategy ensuring zero-downtime updates and rollback capabilities for critical API changes.
Implemented comprehensive security framework with OAuth 2.0, JWT tokens, and Azure Active Directory integration. Added end-to-end encryption, comprehensive security headers, audit logging, and threat protection ensuring enterprise-grade security for all API communications and data access across the platform.
Developed intelligent routing algorithms with health checks, circuit breaker patterns, and automatic failover mechanisms. Implemented rate limiting (1000 requests/minute per system), request/response transformation, and API versioning with backward compatibility ensuring seamless integration and optimal performance.
Implemented comprehensive API monitoring with real-time metrics, performance tracking, and usage analytics. Features request/response logging, error tracking, automated alerting for performance degradation, and security incidents across all integrated systems with 99.5% SLA monitoring.
Multi-Database Architecture with Data Consistency
Challenge: Designing and implementing a complex multi-database architecture using Azure SQL for transactional data and Cosmos DB for document storage while maintaining data consistency, ensuring ACID properties, and handling 5M+ records per hour with sub-200ms response times across distributed systems.
Architected enterprise-grade Azure SQL Database with optimized indexing, connection pooling, and query performance tuning. Implemented read replicas for analytics queries, automated backups with point-in-time recovery, and geo-replication across multiple regions ensuring 99.9% data availability and optimal performance.
Implemented globally distributed Cosmos DB with intelligent partitioning, automatic scaling, and comprehensive data consistency models. Configured multi-region writes, conflict resolution policies, and custom partitioning strategies ensuring optimal performance for document storage and real-time analytics workloads.
Developed comprehensive data synchronization patterns using Azure Data Factory and custom ETL pipelines. Implemented eventual consistency models, data validation frameworks, and conflict resolution algorithms ensuring data integrity across multi-database architecture with 99.9% consistency.
Implemented multi-layer caching strategy using Redis with 98% cache hit rate. Developed intelligent cache invalidation, distributed caching patterns, and cache-aside patterns with write-through for critical data ensuring optimal performance and reduced database load during peak operations.
Enterprise Analytics & Data Lake Integration
Challenge: Integrating comprehensive analytics platforms and Azure Data Lake solutions for real-time business intelligence, machine learning workloads, and enterprise decision-making while processing 5M+ records per hour with sub-second analytics queries and predictive insights.
Implemented scalable Azure Data Lake Storage with hierarchical namespace, security integration, and comprehensive data governance. Configured automated data ingestion pipelines, data partitioning strategies, and lifecycle management policies ensuring optimal performance for enterprise-scale analytics operations.
Deployed comprehensive ML platform using Azure Machine Learning with custom models for business pattern prediction, demand forecasting, and operational optimization. Implemented MLOps pipeline with automated model retraining, A/B testing, and automated rollback ensuring continuous model improvement and business value delivery.
Integrated Power BI with real-time data connections, automated report generation, and interactive dashboards. Implemented custom data models, advanced analytics capabilities, and comprehensive business intelligence features ensuring data-driven decision making across all BAT departments.
Implemented Azure Stream Analytics processing 30,000+ events per second from business transactions and system metrics. Developed real-time analytics pipelines, event processing workflows, and automated alerting systems ensuring immediate insights and proactive business optimization.
Enterprise Security & Compliance Framework
Challenge: Implementing comprehensive security measures for a mission-critical enterprise system handling sensitive employee data, financial transactions, and business operations while ensuring GDPR compliance, threat protection, and maintaining security posture across distributed microservices architecture.
Implemented enterprise-grade OAuth 2.0 authentication supporting thousands of BAT employees across multiple departments. Added MFA support with TOTP and SMS backup, conditional access policies based on location and device trust, and comprehensive identity management ensuring secure access to all enterprise systems.
Deployed comprehensive security framework with Azure Security Center, threat detection, and audit logging. Implemented OWASP Top 10 protection, SQL injection prevention, XSS filtering, and network security groups with least-privilege access ensuring enterprise-grade security for all data and operations.
Implemented AES-256 encryption for data at rest in Azure SQL Database and Azure Storage. Configured TLS 1.3 for all data in transit with certificate pinning, field-level encryption for sensitive employee data using Azure Key Vault, and automatic key rotation every 90 days ensuring comprehensive data protection.
Developed comprehensive compliance framework supporting GDPR, enterprise regulations, and industry standards. Implemented data residency controls, consent management system, automated compliance reporting, and 7-year audit log retention ensuring regulatory adherence and comprehensive audit trails.
Business Impact & Results
These engineering solutions delivered transformative results for BAT: 30% reduction in operational costs ($5M+ saved annually), 70% faster data processing (5M+ records/hour), unified 8+ enterprise system integrations with 99.9% data consistency, and comprehensive analytics for strategic decision-making. The architecture with Azure Service Fabric, Saga pattern implementation, and multi-database architecture provided enterprise-grade scalability, security, and reliability for BAT's mission-critical operations.
Enhanced Performance Metrics & Analytics
Real-time system performance monitoring and advanced analytics dashboard
System Performance Distribution
Enterprise Integration Performance
Real-Time Data Processing Trends
System Load & Performance Metrics
Enterprise System Integration Metrics
Metrics & Measurement Framework
The following performance metrics were established as key success indicators for the BAT Inhouse App project. Each metric was carefully defined, measured, and validated to demonstrate the system's effectiveness in revolutionizing enterprise operations and delivering comprehensive business value across all integrated systems.
System Performance Metrics
End-to-end API response time tracking using Azure Application Insights and custom telemetry. Measured from initial employee request through authentication, business logic processing, and response delivery across all microservices.
Critical for enterprise operations where employees need instant access to business systems and real-time data. Faster response times enable efficient workflow processing and immediate system interactions.
Achieved through .NET Core optimization, Redis caching implementation, Entity Framework query optimization, and microservices architecture reducing processing overhead by 70%.
Redis cache performance monitoring using Azure Cache for Redis metrics. Tracks cache hits vs misses for employee data, business metrics, and system information across all microservices and integrations.
Essential for high-frequency enterprise operations where thousands of employees require instant access to business data. High cache hit rates reduce database load and improve system responsiveness during peak business hours.
Implemented intelligent cache invalidation strategies, L1/L2 caching layers, and distributed caching patterns ensuring optimal data retrieval for enterprise workflows and business processes.
Azure SQL Database and Cosmos DB query performance monitoring using Query Store and custom telemetry. Tracks execution time for all business-related queries including employee data, transactions, and analytics processing.
Critical for maintaining sub-second response times during concurrent business operations. Optimized queries ensure smooth employee experience during peak business periods and real-time data access.
Achieved through Entity Framework optimization, database indexing strategies, connection pooling, and read replica implementation for analytics queries across multi-database architecture.
Enterprise Integration Metrics
Real-time integration monitoring using Azure Service Bus message counting and custom telemetry. Monitors successful data synchronization between BAT systems and SAP Planet 8/9 across all business processes.
Represents the core business value of enterprise system integration - enabling seamless data flow between BAT operations and SAP ERP systems. Higher success rates indicate reliable business process automation.
Validated through comprehensive integration analytics, data consistency checks, and business process monitoring showing reliable SAP connectivity and data synchronization.
Integration health monitoring with automated testing and real-time status tracking. Monitors ticket management, employee onboarding, and IT service delivery workflows across Cherwell systems.
Essential for HR and IT operations where automated workflows and service delivery depend on reliable system integration. High success rates ensure consistent employee service delivery.
Achieved through robust integration testing, automated retry mechanisms, and comprehensive error handling ensuring reliable HR and IT service management.
Microsoft Power Platform connectivity monitoring with custom connectors and data synchronization tracking. Monitors Power Apps, Power BI, and Power Automate integration success rates.
Critical for low-code business applications and analytics where employees depend on Power Platform for business processes and data visualization. Reliable integration ensures business continuity.
Implemented through custom connectors, data transformation pipelines, and comprehensive error handling ensuring seamless Power Platform integration.
Business Intelligence Metrics
Azure Stream Analytics and Data Factory pipeline monitoring with real-time event counting and processing metrics. Tracks data ingestion, transformation, and analytics processing across all business systems.
Essential for enterprise analytics where real-time business intelligence depends on high-volume data processing. Higher processing rates enable comprehensive business insights and decision-making.
Achieved through Azure Data Lake integration, stream processing optimization, and machine learning pipeline automation ensuring continuous business intelligence delivery.
Azure Machine Learning model performance tracking with automated accuracy testing and prediction validation. Monitors business pattern prediction, demand forecasting, and operational optimization models.
Critical for predictive analytics where business decisions depend on accurate machine learning insights. Higher accuracy enables better strategic planning and operational optimization.
Implemented through MLOps pipeline with automated model retraining, A/B testing, and performance monitoring ensuring continuous model improvement and business value delivery.
Power BI usage analytics and dashboard interaction tracking across all BAT departments. Monitors report generation, dashboard usage, and business intelligence tool adoption rates.
Reflects the success of business intelligence implementation where employee adoption indicates value delivery. High adoption rates show effective data-driven decision making.
Achieved through user training, intuitive dashboard design, and real-time data connections ensuring comprehensive business intelligence adoption across all departments.
Security & Compliance Metrics
OAuth 2.0 and Azure Active Directory authentication monitoring with security event tracking. Monitors login success rates, MFA completion, and authentication failures across all enterprise systems.
Critical for enterprise security where employee access depends on reliable authentication. High success rates ensure secure access while maintaining user experience.
Achieved through OAuth 2.0 implementation, MFA integration, and comprehensive identity management ensuring secure and reliable employee authentication.
Azure Security Center and threat detection monitoring with comprehensive security event tracking. Monitors security events, authentication failures, and potential security breaches across the entire platform.
Essential for enterprise security where zero security incidents demonstrate effective security measures and compliance. Zero incidents indicate comprehensive threat protection.
Maintained through multi-layer security architecture, threat detection, end-to-end encryption, and comprehensive security monitoring ensuring enterprise-grade security posture.
Automated compliance monitoring using Azure Policy and custom compliance frameworks. Tracks GDPR adherence, data residency controls, and regulatory compliance across all business operations.
Critical for enterprise operations where regulatory compliance is mandatory. 100% compliance ensures legal adherence and business continuity.
Achieved through comprehensive compliance framework, automated monitoring, and regulatory adherence ensuring full compliance with enterprise and industry standards.
Measurement Framework & Validation
Established performance baselines using historical BAT enterprise system data and manual business processes before BAT Inhouse App implementation to ensure accurate improvement tracking and ROI measurement across all integrated systems.
Implemented comprehensive monitoring using Azure Application Insights, custom dashboards, and automated alerting to track all BAT Inhouse App metrics continuously throughout the system lifecycle with proactive issue detection.
Established data validation protocols ensuring accuracy of business metrics, financial calculations, and employee satisfaction measurements through automated verification and manual audit processes across all enterprise systems.
Implemented continuous improvement processes using real-time analytics, A/B testing, and employee feedback to optimize BAT Inhouse App performance and enhance business value delivery continuously across all departments.
BAT Business Impact & Growth Metrics
Financial Growth Impact
Operational Growth Impact
BAT Growth Success Metrics
Related Services
Summary
Delivering at scale requires the right architecture and operational practices. For architects and tech leads, case studies like this one illustrate trade-offs and outcomes. If you would like to discuss a similar project or an architecture review, get in touch via the contact section on the home page.
Part of cluster
Cloud & Azure — explore related topics:










