Launching Greece's Renewable Energy Marketplace on AWS with Grade A Security & Compliance

Deploying HEnEx's first in-house cloud application with regulatory compliance from day one

HEnEx needed to launch Greece's first renewable energy PPA marketplace — its first application developed and hosted independently, outside the ATHEX IT umbrella. The platform had to go live within 1 to 1.5 months, yet meet strict dual-regulatory requirements (GDPR, firewall and malware protection, 5-year backup retention) from day one. With the platform's future depending on market adoption, the architecture also had to remain lean and cost-efficient for an initial user base of approximately 100 — production-grade security without overengineering.

LCM Go Cloud designed, deployed and operates a secure, compliant, cost-optimised AWS environment built around three layers:

Layer 1 — FortiGate NGFW & Network Security: FortiGate in public subnet with IPS, web filtering, malware and DDoS protection; private subnet isolation for compute and database; security groups and ACLs controlling all traffic.

Layer 2 — Containerised Compute & Storage: EC2 with Docker containers (web front-end + database backend); Auto Scaling group; PostgreSQL with point-in-time snapshots; automated daily S3 backups with 5-year retention.

Layer 3 — Monitoring & Operations: LCM CloudPosture CSPM, for Grade A Security and Compliance; SLA-backed support with 1-hour critical response time.