Components
DB is Postgres on GCP.
Large objects stored on Google Cloud Storage.
Back-end (Django) and front-end (React) hosted on GAE Python Standard Environment.
Workers running on a GCP Windows instance for Windows only workflows.
Workers and back-end communicate via Pub Sub.
Authentication handled by Firebase Auth.
Payments handled by Stripe.
Notes
Everything hosted within Google’s infrastructure, within a VPC and encrypted at rest
Https is used for all traffic
All services are in scope for ISO27001 / SOC2 as per Google Cloud's guidelines