---
title: "Overview — N1 IT Landscape"
description: Complete blueprint and reproduction guide for N1 Healthcare's IT estate and infrastructure.
---

N1 IT Landscape · Principal Engineer: Arun Venkataraman

This landscape is N1's **reproduction bible**. If every person at N1 lost their memory tomorrow, this set of documents lets them rebuild the company's entire IT estate from scratch: people, machines, identity, code, CI/CD, cloud, and Kubernetes workloads.

## The 60-Second Mental Model

N1 builds a **HIPAA platform for licensed clinicians** who handle patient medical data. A clinician uploads medical records; N1's pipeline reads every page, extracts clinical facts (biomarkers, genetics, diagnoses, medications), links biomarker readings to global BiomarkerDefinitions, and generates **Comprehensive Health Reports (CHRs)**.

All services run as containerized workloads on two Kubernetes clusters in AWS (`us-east-2`), reachable from the outside **only** through Cloudflare Zero Trust.

## Landscape Chapters

| Chapter | What it covers |
| --- | --- |
| [01 · People & Organization](/landscape/people/) | Team, locations, team permissions, and production access |
| [02 · Devices & Office Network](/landscape/devices/) | Laptops, MDM, and office network infrastructure |
| [03 · Identity & Access](/landscape/identity/) | Google IdP, Cloudflare Access + WARP, 2FA, and AWS sign-in |
| [04 · SaaS & Subscriptions](/landscape/saas/) | Third-party services, vendors, and subscription tiers |
| [05 · Cloudflare Edge](/landscape/cloudflare/) | DNS, WAF, Zero Trust Access, Tunnels, Workers, and R2 |
| [06 · Source Control, CI/CD & SDLC](/landscape/source-cicd/) | GitHub repos, build-and-ship pipelines, and release governance |
| [07 · AWS Cloud Infrastructure](/landscape/aws/) | EKS, Karpenter, ECR, S3, Aurora PostgreSQL, Valkey, and secrets |
| [08 · Kubernetes Platform](/landscape/kubernetes/) | Namespaces, platform controllers, and live cluster workloads |
| [09 · Application Architecture](/landscape/app-architecture/) | Request path and the medical-record → CHR generation pipeline |
| [10 · AI & Model Access](/landscape/ai-models/) | LiteLLM gateway, Vertex AI, Amazon Bedrock, and Langfuse tracing |
| [11 · Data, Observability & Tooling](/landscape/data-ops/) | Data stores, SigNoz / OpenTelemetry, internal tools, and secrets |
| [12 · Security & Compliance Setup](/landscape/security-landscape/) | Full security posture, controls, and HIPAA compliance setup |
| [Network — Infrastructure & VPC](/landscape/network/) | VPCs, subnets, route tables, peering, NAT gateways, and security groups |
| [Network — Service-to-Service Map](/landscape/network-services/) | Microservice call graph, ports, streaming topology, and DB access |
| [Bill of Materials & Dependencies](/landscape/dependencies/00-bom/) | Software version pins and HEAD SHA index across all repos |