Case Study: Envoy accelerates delivery of high-compliance workplace apps with Heroku Shield (Heroku)

Heroku Shield Helps Envoy Accelerate Delivery of High Compliance Apps

Envoy is a workplace-management platform that automates visitor check‑in, package handling, and meeting-room booking. As it scaled, the company needed to simplify developer workflows, tighten access controls and auditability, and meet strict compliance and privacy requirements—while avoiding the added cost and complexity of a full migration to AWS and the extra DevOps headcount that would require.

Envoy addressed these challenges by adopting Heroku Enterprise Teams with Okta SSO, migrating apps into Heroku Private Spaces and Heroku Shield for HIPAA/PCI-grade controls, and moving its data layer to AWS RDS with secure VPC peering. The hybrid setup kept Heroku for app delivery and compliance, enabled faster feature releases, streamlined onboarding and least‑privilege permissions, supported SOC 2 compliance, and reduced total costs—saving an estimated 15% in headcount compared with an AWS-only approach.

Envoy

Mike Chan

Vice President of Engineering