Architecture

Sitefinity Cloud operates on a multitenancy architecture, where customers share some of the underlying compute, while keeping the services and applications of each customer subscription (project) isolated at the network level. Each environment for each customer subscription (project) has separate application and database resources, as well as other dedicated Azure resources. There is no virtual multitenancy at the application or database level. 

By default, all resources are replicated or distributed across three availability zones automatically. This ensures high availability and redundancy for the deployed applications in cases of natural disasters or data center outages.

After purchasing a Sitefinity Cloud subscription, each customer gets their dedicated organization, and each subscription corresponds to a project in that organization. If a customer purchases additional Sitefinity Cloud subscriptions, these are added as extra projects.

The following diagram illustrates a high-level Sitefinity Cloud setup with organizations for multiple customers:

Each Sitefinity Cloud subscription (project) hosts a single decoupled Renderer application that has a single codebase. The decoupled Renderer application is deployed consecutively to multiple environments through a CI/CD pipeline that is provided out of the box.
Sitefinity CMS is provided either as a service that is fully managed by Progress Software (SaaS setup), or as a customizable application managed by the customer (PaaS setup). On a user level, this is controlled through a Developer Extensions toggle.
A Sitefinity Cloud subscription (project) includes preconfigured Staging environment and Production environment.

The following diagram is a detailed representation of the different infrastructure components in a Sitefinity Cloud setup and their relations:

The following component marked with * in the diagram is purchased as add-on: 

• Cloudflare HTTP and WAF Logs Push* is part of the Advanced Security and Compliance add-on.

The following capabilities are only available in case the Developer Extensions toggle is enabled (PaaS setup):

• Restart the application on any environment*
• Export the DB from any environment*
• Import a DB backup to any environment*

The Sitefinity Cloud architecture is based on the following Microsoft Azure and Cloudflare services:

• Cloudflare WAF, Cloudflare DDoS Protection, and Cloudflare SSL/TLS to ensure optimal security for the web application.
• Cloudflare CDN to reduce page and content load times.
• Cloudflare Argo Smart Routing to detect real-time congestion and route web traffic across the fastest and most reliable network paths.
• Cloudflare Workers to create custom edge rules that can transform the request or response based on different conditions at the edge.
• Cloudflare Image Optimization to reduce the image size by stripping metadata and applying lossless or lossy compression to remove redundant bytes from images.
• Cloudflare Tunnel to provide a secure way to connect Azure resources to Cloudflare without a publicly routable IP address.
• Azure Kubernetes Service (AKS) for hosting the applications and services like Redis Cache.
• Azure SQL Database to store the website’s data, tuned to ensure optimal performance for the application.
• Azure Files for storing Lucene search index files.
• Azure Blob Storage to store the exported database .bacpac files, which are exported on-demand, as well as automatically on a regular basis. It is also used to store Sitefinity media library items.
  
• Microsoft Entra ID (formerly, Azure Active Directory) for easy user management and single sign-on.
• Microsoft Defender for Cloud to ensure defense in depth with its ability to both detect and help protect against threats.
  

The Management Portal layer provides all capabilities for managing your Sitefinity Cloud project, including identity and access management, domain management, code manipulation, deployment, monitoring application metrics, and more. It provides a user interface to allow working with the project’s management tools:

• Source Control Management
• CI/CD Management
• Application Management
• Database Management
• User Management
• Domain Management
• Integration Hub
• Boards Hub
• Wiki

The listed tools are described in detail in Management Portal.  

For User Management, the solution leverages the capabilities of Microsoft Entra ID (formerly, Azure Active Directory) and is described in User management.

The following regions are currently supported for Sitefinity Cloud:

NOTE: More Sitefinity Cloud regions will be added over time. If you need to use a different region than the listed for your Sitefinity Cloud deployment, contact your Account Manager. 

IMPORTANT: All information provided below refers to the legacy architecture that has been used for Sitefinity Cloud PaaS projects only. If you have been onboarded to Sitefinity Cloud PaaS before May 2025, your project is possibly set up on the legacy architecture. There is a path for seamless migration to the new architecture with zero downtime, which is handled by the Sitefinity Cloud team. Please contact your Account Manager or Sitefinity Support team to get more information on the migration path.

Sitefinity Cloud has a single-tenancy architecture, where the services for each customer are completely isolated via dedicated infrastructure contained in separate Azure subscription and Microsoft Entra ID (formerly, Azure AD).

After purchasing a Sitefinity Cloud subscription, each customer gets their own dedicated organization. Each Sitefinity Cloud subscription corresponds to a project in the organization. When a customer purchases additional Sitefinity Cloud subscriptions, these are added as extra projects.
The following diagram illustrates a high-level Sitefinity Cloud customer organization:

The following diagram illustrates the different components in a Sitefinity Cloud subscription (project) and their interrelations:

The following components marked with * in the diagram are purchased as add-ons:

• ASP.NET Core Renderer* resources are provided with the ASP.NET Core Renderer add-on
• Failover Region* resources are provided with the Multi-region failover add-on
• Cloudflare HTTP and WAF Logs Push* is part of the Advanced Security and Compliance add-on
• Media Blob Storage Account* is provided with the Blob storage add-on
  
• Azure AI Search* is provided with the Advanced Search add-on

Infrastructure services

The Sitefinity Cloud architecture is based on the following Microsoft Azure and Cloudflare services:

• Cloudflare WAF, Cloudflare DDoS Protection, and Cloudflare SSL/TLS to ensure optimal security for the web application.
• Cloudflare CDN to ensure a pleasant user experience by reducing page and content load times.
• Cloudflare Argo Smart Routing to detect real-time congestion and route web traffic across the fastest and most reliable network paths.
• Cloudflare Workers to create custom edge rules that can transform the request or response based on different conditions at the edge.
• Cloudflare Image Optimization to reduce the image size by stripping metadata and applying lossless or lossy compression to remove redundant bytes from images.
• Azure App Service with preconfigured auto-scaling to optimally handle the load of the website at any time.
• Azure SQL Database to store the website’s data, tuned to ensure optimal performance for the application.
• Azure Blob Storage to store the exported database .bacpac files, which are exported on-demand, as well as automatically on a regular basis.
  It is also used to store media library items, provided that you have purchased the Blob storage add-on.
• Azure AI Search to allow a seamless experience when working with search indexes. To be able to use this service, you must have purchased the Advanced Search add-on.
• Azure Cache for Redis used for server-side data caching to further optimize the website performance.
• Azure Active Directory for easy user management and single sign-on.
• Microsoft Defender for Cloud to ensure defense in depth with its ability to both detect and help protect against threats.
  

Management Portal

The Management Portal provides all functionality for managing your Sitefinity Cloud solution, including identity and access management, domain management, links to monitoring dashboards, code manipulation, deployment, and so on. Below is a list of all solutions/tools provided by the Management Portal:

• Source Control Management
• CI/CD Management
• Application Management
• Database Management
• User Management
• Domain Management
• Integration Hub
• Boards Hub
• Wiki

The services are described in detail in Management Portal.  

For User Management: the solution leverages the capabilities of Microsoft Entra ID (formerly, Azure Active Directory) and is described in User management.

Regional Data Centers

Sitefinity Cloud is built on Microsoft Azure cloud technology, enabling you to select the closest data center in your region. The following locations are supported: