Securing 35+ TB of loan documents on AWS with DocuSwift
Aavas Financiers, a listed Indian housing-finance NBFC, replaced an ageing on-premises document store with DocuSwift on AWS — migrating more than 35 TB of loan files, masking PII at scale and running active-active across Mumbai and Hyderabad.
- Industry
- Housing finance (NBFC)
- Region
- India
- Data volume
- 35+ TB
- Architecture
- Active-active, 2 regions
- 35+ TB
- of legacy loan records migrated and managed in DocuSwift
- 60%
- reduction in infrastructure management cost
- 99.99%
- uptime from an active-active Mumbai + Hyderabad design
- Real-time
- PII and Aadhaar masking on documents at ingest
Growth outpaced on-premises infrastructure
Aavas Financiers needed to scale securely while meeting regulatory and performance requirements — and its document estate had become the bottleneck.
- On-premises infrastructure could not keep pace with business growth and regulatory expectations.
- Document data had grown past 35 TB, hitting storage limits and slowing retrieval across branches.
- Sensitive customer and financial data was stored unmasked, creating compliance and audit risk.
- The DMS, loan origination system (LOS) and loan management system (LMS) were disconnected, breaking workflows.
- Manual infrastructure management drove up operating and maintenance cost.
- Limited disaster recovery and business continuity raised the risk of downtime and data loss.
DocuSwift on AWS, with FinHub masking
HabileLabs, working with AWS, modernised document management and data security in phases so the business kept running throughout.
- Phased lift-and-shift migration of 35+ TB of legacy documents into DocuSwift on Amazon S3, tuned for cost and performance.
- DocuSwift's API-first design connected the DMS with LOS and LMS so every department works from one searchable repository.
- FinHub's AI-powered masking (running on Amazon EC2 G4 instances) detects and anonymises PII and Aadhaar numbers across large datasets.
- Amazon Cognito for authentication and AWS IAM for role-based access across every layer.
- Amazon CloudWatch for real-time metrics and alerts; AWS Backup for policy-based disaster recovery.
- Active-active architecture spanning the AWS Mumbai (ap-south-1) and Hyderabad (ap-south-2) regions.
What was deployed
A serverless DocuSwift stack in Aavas's own AWS account, replicated across Mumbai and Hyderabad.
Branch & HQ staff
Web console · SSO
Auditors
Read-only, time-boxed
LOS · LMS · CRM
API & webhooks
Amazon CloudFront
Console on your domain
Amazon Cognito
MFA · Entra ID SSO
Amazon API Gateway
REST + WebSocket
AWS Lambda
Business logic
Amazon S3
Documents · KMS encrypted
Amazon DynamoDB
Metadata · audit index
Amazon Textract
OCR
Amazon Bedrock
Summaries · chat
Amazon SES
Notifications
AWS Backup
Policy-based backups
Cross-region DR
Active-active option
Amazon CloudWatch
Metrics · alarms
- Amazon S3
- AWS Lambda
- Amazon API Gateway
- Amazon DynamoDB
- Amazon Cognito
- AWS IAM
- Amazon CloudWatch
- AWS Backup
- Amazon EC2 (G4)
What changed for Aavas
Lower cost. Serverless AWS services removed the hardware refresh cycle and manual management, cutting infrastructure management cost by 60%.
Always on. The active-active design across two AWS regions delivered 99.99% uptime and business continuity for branch operations.
Compliance by default. FinHub's real-time masking of PII and Aadhaar data, together with Cognito authentication, IAM role-based access and DocuSwift's audit trails, strengthened the security posture and regulatory adherence.
Faster operations. Unified document access across LOS, LMS and DMS and automated workflows sped up internal processes and decision-making for more than 35 TB of financial records.
Planning a migration of your own?
We have moved tens of terabytes of loan documents without interrupting branch operations. Let us show you the phased approach.
Or email info@habilelabs.io · Monday to Friday, 10:00–19:00 IST (excluding public holidays)