Data Architecture and Platforms

Efficiencies through data hub centralization

The result

First workload live at four months, eleven sources landed, 3 TB of data distributed to downstream services by month seven.

Governed analytical platform built from nothing for a regulated financial services firm. Tens of millions of rows a day, three environments, access controlled before first use.

The challenge

A regulated financial services firm with nothing central in place. Eleven upstream systems and external providers, each with its own delivery method and cadence, and no single place where a figure could be traced to source.

Maturity was improving but ways of working and requirements were unstable.

The solution

The build ran in a fixed sequence. Environments, identity and the promotion path first. Then an untouched landing area. Then governance, before any consumer access. Then one use case end to end on real data with real access controls. Then gradual expansion of data scope.

The fixed build sequence, in five steps Step one: environments and identity, with the promotion path in place first. Step two: an untouched landing area, append-only and retained exactly as delivered. Step three: governance, before any consumer access. Step four: one use case end to end on real data with real access controls. Step five: gradual expansion of data scope under the same controls. 1 Environments and identity Promotion path in place first 2 Untouched landing area Append-only, retained as delivered 3 Governance Before any consumer access 4 One use case end to end Real data, real access controls 5 Gradual expansion More data scope, same controls
The order was the design decision. Governance landed before any consumer access, and the landing area stayed append-only so everything downstream remains rebuildable from it.

The data model started with the definition of data domains. The conformed models built for the first domain did not survive requirements that were still changing. The lesson is to either commit models to how the organization is shaped, or defer structure until the organization knows what it wants.

Data quality controls came from the same build. Provider schema changes rarely arrive as an alert. Usually it is a load that succeeded with a column of nulls, noticed weeks later, or a failed job due to a different schema than normally expected. Additional controls such as schema checks, and null-rate and distribution deltas against the preceding loads, help but do not catch everything. File-level checks catch more incidents than row-level rules. Examples of controls include row count against a trailing average, latest business date present, and comparison against the previous delivery.

For actual breaks, the policy is to fail for anything feeding a reported number and quarantine row-level problems, with the rejected row and its reason retained, a named owner for the queue, and a replay path once the provider fixes the file.

The outcome

The firm went from nothing central to one governed place where a figure can be traced back to its source, used by several teams across multiple processes, with the same numbers everywhere.
All of it on a single, securely managed backbone.

Nothing central in place?

Platform builds start with environments, identity and the promotion path, not with the first use case.