Modality is now part of We Ankor
Modality is now part of We Ankor
Hashavshevet, a leading provider of the H-ERP system for small and mid-sized businesses in Israel, recognized a growing need to offer its customers a cloud-native alternative to traditional on-premise deployments. In partnership with Modality, an AWS Advanced Partner, Hashavshevet launched Hcloud, a secure, scalable, and fully managed cloud platform for hosting its flagship ERP solution on AWS.
Today, hundreds of customers securely access their dedicated H-ERP environments via the Hcloud platform—without the complexity of managing IT infrastructure.
For decades, Hashavshevet’s ERP software was installed and operated within customers’ on-premises environments. As organizations moved toward cloud-first strategies, Hashavshevet faced several challenges:
Fragmented IT environments led to inconsistent performance and high support overhead.
Customers lacked access to enterprise-grade infrastructure, particularly robust backup and DR capabilities.
Deployment and maintenance were manual, requiring coordination for updates, backups, and security patching.
Lack of centralized disaster recovery left many customers exposed to data loss or lengthy recovery scenarios.
Hashavshevet needed a centralized, cloud-based platform that would provide each customer with their own secure and resilient H-ERP environment—complete with modern backup and disaster recovery.
Hashavshevet partnered with Modality to design and implement the Hcloud platform on AWS—transforming their traditional on-premises delivery model into a scalable, secure “ERP-as-a-Service” solution.
Each customer is provisioned with a dedicated Windows EC2 instance, preconfigured with:
The H-ERP software stack
Supporting applications (e.g., MS Office, PDF generators)
Secure remote access options (via RDP over VPN)
Automated provisioning, monitoring, and patching
To resolve the broader infrastructure and security challenges, Hashavshevet and Modality collaborated on a comprehensive cloud migration and re-architecture:
Customer environments were deployed on Amazon EC2 instances across multiple Availability Zones, ensuring high availability.
Redundant VPN-Firewall appliances were used to strictly control and inspect inbound and outbound network traffic, applying least-privilege access principles.
All outbound internet traffic is filtered and inspected to meet compliance and cybersecurity standards.
Local EC2 volumes are encrypted with AWS KMS, ensuring data-at-rest protection.
Rigorous backup policies were implemented using AWS Backup and Amazon S3/Glacier for automated retention and DR readiness.
A secure, multi-account AWS environment was established using AWS Control Tower, applying service control policies, guardrails, and centralized governance.
AWS IAM, Security Hub, GuardDuty, and CloudTrail were integrated to provide:
Strong identity and access management
Continuous threat detection
Real-time compliance insights
Full audit logging for traceability
Automated infrastructure pipelines were created to support Infrastructure-as-Code (IaC), enabling consistent and secure deployment of both new and updated environments.
This comprehensive architecture not only modernized Hashavshevet’s operations but also ensured resilience, compliance, and long-term scalability for the growing customer base.
Since launching Hcloud:
Hundreds of customers have migrated from on-prem to the cloud, with seamless onboarding.
RTOs reduced from days to under 1 hour, with automated DR built into every environment.
Business continuity improved, with offsite storage and cross-region options for critical data.
Customers now benefit from enterprise-grade security, availability, and disaster resilience—without the complexity or cost of building it themselves.
