Solution architecture
This solution uses a hybrid cloud deployment. The basic components of DingTalk are deployed on Alibaba Cloud, and data can be stored in a company's private domain. The DingTalk Open Platform supports the development of miniapps and H5 microapplications. This allows companies to build their own applications to connect to their business systems and integrate them into the DingTalk workbench.
The following figure shows the system architecture.
DingTalk Enterprise is an integrated office cloud platform that provides unified access over the Internet. It supports four terminal types: Android, iOS, Windows, and Mac, enabling convenient and efficient work from anywhere.
The DingTalk central cloud uses a deployment across two regions and three data centers. It is certified for Multi-Level Protection Scheme (MLPS) Level 3, which ensures lossless disaster recovery at the data center level. The platform also provides powerful application cluster capabilities, various API operations, and Platform as a Service (PaaS) and Data as a Service (DaaS).
A company's internal network contains an enterprise smart portal, third-party software such as Identity Provider (IDP), Office Automation (OA), and Enterprise Resource Planning (ERP), and a dedicated bucket. The company-built smart portal uses the HTTPS protocol to transmit daily office data to DingTalk cloud services and can connect to various complex business systems. Files generated in the enterprise domain are stored directly in the company's private domain. A highly secure encrypted channel rapidly synchronizes messages to the dedicated bucket.