99.9% availability
Target excluding planned maintenance, measured per terminal, per group and per institution.
Gen ATM / Deployment
Your data centre. Your data. Your keys.
Gen ATM NGK 2.0 installs on-premises with separate UAT, production and DR environments. Card, transaction, journal and audit data never leave your estate.
9.2 · Sizing
Indicative production footprint.
Confirmed in the design workshop against your declared volumes, peak TPS and retention. This is the growth scenario.
| Node group | Qty | Specification | Zone |
|---|---|---|---|
| T-NET switch nodes | 2 | 8 vCPU · 16 GB RAM · 200 GB — active/active | DMZ / switch zone |
| Application nodes | 3 | 8 vCPU · 32 GB RAM · 300 GB — CARD PRIME D, Gen ATM NGK, UMS | Internal |
| Database | 2 | 8 vCPU · 64 GB RAM · 1 TB SSD — primary/standby | Internal |
| Messaging & cache | 3 | 4 vCPU · 16 GB RAM · 200 GB — Kafka, Redis | Internal |
| HSM | 2 | payShield-class HA pair, plus one at DR | Security zone |
| UAT | 1 set | Approximately 50% of the production footprint | Internal |
| DR | 1 set | Mirror of production · RPO ≤ 15 min · RTO ≤ 4 h (target) | DR site |
9.3 · Security
Built in, not bolted on.
Keys
HSM only
PIN and CVV operations never leave the HSM.
Transport
TLS 1.2+
Every channel, internal and external.
At rest
AES · PGP
Sensitive fields and perso files.
Access
RBAC · maker-checker
On every sensitive change.
- PAN masking across screens, reports and APIs; SHA-512 card tokens for cross-system references
- JWT with expiry and blacklist, time-based OTP, rate limiting and audit logging on every API
- Full audit trail; maker-checker on card, limit and configuration changes
- Segregation of duties by role, institution and region
9.4 · Availability
What the platform is engineered to hold.
< 300 ms internal
Switch processing latency, excluding core banking and scheme round-trips.
Resilience
Horizontal scaling, active/active switch nodes, database standby, stand-in processing and reversal on timeout.
Support
Twelve-month warranty, then an AMC.
All options include updates, security patches, scheme mandate updates and bug fixes.
| Option | Coverage | Sev-1 response | Sev-2 response | Channels |
|---|---|---|---|---|
| Standard | Sun–Thu 09:00–17:00 | 4 business hours | 1 business day | Ticketing, e-mail |
| Extended | Sat–Thu 08:00–20:00 | 2 hours | 8 hours | Ticketing, e-mail, phone |
| Premium 24×7 | 24 hours, all days | 1 hour | 4 hours | Ticketing, phone, escalation bridge |
Excluded from the AMC: new features, customisation outside an active statement of work, issues caused by third-party infrastructure or unauthorised changes, and onsite visits (available on request).
Next step
Bring your estate onto one console.
Send us your terminal mix, cassette configuration and per-ATM currency plan. We will come back with a driving and monitoring design, a sizing note and a delivery schedule.