Context
The construction group runs large projects across multiple countries. Every site pulls, annotates and releases drawings all day long. The old model — each site keeping its own files, sharing over email or messenger apps — meant version chaos, unclear permissions, and audit trails that couldn’t be reconstructed. The moment a drawing leaked or was seen by someone who shouldn’t have seen it, the risk landed on contracts and compliance.
What they needed: centralised drawing governance, on-demand site access, fine-grained permissions, audit logging, and compliance-grade backup.
What we did
TWO TWO deployed Jumborca ZOHA enterprise file management platform on Azure as the client’s unified drawing hub:
- Hub deployment — ZOHA on Azure Southeast Asia as the master store for global drawings; combined with Azure’s cloud security and storage services (encryption, KMS, access logs), meeting enterprise and project compliance requirements
- Unified identity — Platform integrates with the client’s Microsoft Entra ID: SSO, cross-organisation identity federation, instant revocation on offboarding
- Zero-trust access — Conditional access policies based on device compliance state, geo location and risk signals; external partner access to drawings is scoped by project, by time window, and audited per interaction
- Centralised drawing governance — Country teams pull from one entry point; permissions tiered by project, role and drawing category; every download / upload / edit produces an audit event
- Backup & protection — File system snapshots every day at WORM (immutable) level; ransomware or accidental deletion is recoverable, and recovery drills are routine
Results
- Drawing versions consistent across country sites; access is auditable end-to-end
- External partner access is scoped by project, time window and role, materially reducing contract risk
- Backup upgraded from “depends on individual laptops” to “WORM cloud protection + daily automation”
- Client IT and compliance teams now unified on Entra ID once, meaning future integrations with other collaboration systems cost far less
The full case is NDA-bound. Reach out and we’ll walk you through the architecture, delivery approach and operating model in a private conversation.