Initial Contact and Information Gathering:
The process begins with an initial outreach by the Liferay provisioning team, who collect necessary information from the client.
Provisioning:
Liferay's provisioning team creates the necessary environments and assets. This step typically takes 2-5 days to complete.
Setup Emails and Invitations:
Clients receive welcome emails for both production (PRD) and test (UAT) environments. These emails include links to set up passwords and access the Liferay Cloud console.
Accessing the Liferay Cloud Console:
Clients log into the Liferay Cloud console to manage environments, deploy customizations, and monitor activities.
Configuration:
Clients can start building their sites, pages, and other digital assets using the out-of-the-box features of Liferay DXP. This includes creating and inviting other users to the environment.
Deployment:
The deployment involves setting up the necessary configurations, such as database connections, application servers, and other infrastructure components. This can be done using tools like Jenkins for continuous integration and deployment.
Verification
Branding and Design:
Liferay DXP offers extensive customization options for branding and design, including themes, templates, style books, and layout management tools. This allows businesses to align the digital experience with their brand identity and design preferences.
Low-Code and No-Code Capabilities:
The platform includes low-code and no-code tools that enable faster development of business applications without requiring deep coding knowledge. This can significantly reduce development time, making it possible to complete projects in a fraction of the time typically required.
Integration with Existing Systems:
Liferay DXP can be seamlessly integrated with existing systems and applications, such as CRM, ERP, and third-party applications. It offers robust APIs, connectors, and extension points to facilitate these integrations.
Personalization:
Liferay DXP provides powerful tools for personalizing user experiences. Businesses can create user segments based on various criteria and deliver tailored content and experiences to different user groups. This includes dynamic page layouts, personalized content, and real-time recommendations.
Modular Architecture:
The platform's modular architecture allows for extensive customization. Components can be extended and overridden dynamically, enabling businesses to modify the platform to meet their unique requirements.
Custom Development:
Setup Fees:
The initial setup involves provisioning environments and configuring the system, which can take 2-5 days. The exact cost of setup may vary depending on the complexity of the project and specific business requirements.
Subscription Plans:
Liferay offers various subscription plans, including Pro, Business, and Enterprise, with pricing starting at $24,700 per year for SaaS and $77,300 per year for PaaS.Self-hosted deployment plans start at $40,200 per year.
Support Costs:
Liferay provides different levels of support, including Gold and Platinum. The cost of support depends on the selected plan and the scope of services required. Support services include web-based support, ticketing systems, and emergency response.
Maintenance Fees:
Maintenance fees are included in the subscription plans and cover software updates, security patches, and ongoing maintenance. These fees ensure that the platform remains secure and up-to-date with the latest features and improvements.
Additional Services:
Liferay offers professional services such as consulting, training, implementation, and customization. These services are typically billed separately and can vary based on the level of engagement and specific needs of the business.
Reinstatement Fees:
Official Documentation:
Liferay providesextensive officialdocumentationthat covers variousaspects of theplatform, includinginstallation, configuration, customization, and troubleshooting.
Online Coursesand Webinars:
Liferay offersonline coursesand webinarsto help userslearn at theirown pace. Thesecourses covera wide rangeof topics, frombasic usage toadvanced customizationand integration.
Community Support:
Userscan access communitychat, forums, and blogs wherethey can askquestions, shareexperiences, andget advice fromother Liferay usersand experts.
Workshops andConsultancy:
Liferay providesworkshops andconsultancy servicesfor more personalizedand in-depth training. These servicesare designedto help businessesimplement andcustomize Liferay DXP according totheir specificneeds.
Customer Portal:
Compliance withSecurity Standards:
Liferay DXP is built withsecurity in mind, addressing commonvulnerabilitiesand exploitsas describedby the OWASP Top10 and the CWE/SANS Top 25.
Authentication andAuthorization:
The platformsupports flexibleauthenticationmethods, includingmulti-factor authentication, SSO, and LDAPintegration. Italso featuresa robust role-based accesscontrol (RBAC) systemto manage userpermissions.
Data Encryption:
All datain transit usesenforced SSLconnections withminimum AES-256 encryption. Data storedin Liferay's cloudservices is encryptedat rest.
Regular SecurityUpdates:
Liferay regularlyreleases securitypatches and updatesto address newvulnerabilitiesand ensure theplatform remainssecure.
Backup and DisasterRecovery:
Liferay conductsregular backupsof customer data, which are encryptedand replicatedacross differentregions. Backuproutines arerun every 30 minutesfor system infrastructureand daily forcustomer data, with a retentionperiod of 30 day
Security Audits and Certifications:
Regular Releases:
Liferay DXP includes changes to default settings and new features in most new versions. Users are advised to review these changes and decide whether to keep the old defaults or accept the new ones.
Service Packs and Fix Packs:
Liferay provides service packs and fix packs that include cumulative updates and bug fixes. These are made available to users as soon as they are released.
Upgrade Tools:
Liferay offers tools to simplify the upgrade process, including an upgrade report that captures details about the upgrade, such as execution time, schema versions, and any errors or warnings encountered.
Security Patches:
Liferay does not claim ownership of customer data or content stored in Liferay DXP Cloud Services. Customers retain full ownership and control over their data.
If a customer's subscription is terminated, they can continue to run their Liferay project without interruption, ensuring continued access to their data.
Liferay DXP supports the "Right to Data Portability" requirement of the GDPR. Administrators can export a user's personal data per application before going through the data erasure process
The exported user data is provided in a machine-readable XML format, allowing customers to extract and transfer user data as needed.
Liferay DXP Cloud Subscriptions offer flexible scaling options to adjust to changing organizational needs.
Customers can scale up by enabling the "Auto-Scaling" feature, which allows them to deploy and use additional instances of Liferay DXP beyond the base subscription.
Auto-Scaling is charged on a per-instance, per-hour basis, and customers are invoiced quarterly for any additional instances used.
Customers can scale down by disabling Auto-Scaling, which will remove any additional instances beyond the base subscription.
The base Liferay DXP Cloud Subscription allows customers to choose different sizing options (e.g., S, M, L) for their instances, defined by the number of vCPUs and memory allocated.
Subscription Term and Renewal:
Liferay DXP subscriptions typically have a minimum term of twelve (12) months and cannot be terminated for convenience by either party during this period.
Subscriptions may be renewed upon mutual agreement between the parties. Unless otherwise agreed, the term of the Subscription Services will automatically renew for successive terms of one (1) year each, provided that Liferay has sent an email notification of the upcoming renewal at least sixty (60) days prior to the renewal date.
Customers must give written notice of their intention not to renew at least thirty (30) days prior to the expiration of the current term.
Reinstatement Fees:
If a customer terminates subscriptions or does not renew within thirty (30) days after the termination or expiration of the subscription term, Liferay reserves the right to charge reinstatement fees. The reinstatement fee per unit is equal to 120% of the fees for the reinstated subscription, pro-rated based on the lapsed period between the expiration or termination and the date of reinstatement.
Suspension and Termination:
Liferay may suspend or terminate a customer's use of cloud services if the customer breaches the agreement, applicable law, or violates third-party rights. In such cases, Liferay is not obligated to refund any prepaid fees, and the customer will continue to incur applicable fees during the suspension.
Liferay will notify the customer of any suspension and the reasons for it, requesting rectification within a specified cure period. If the customer fails to rectify the breach within the cure period, the agreement will automatically terminate upon expiration of the cure period without any liability to the customer.
Unauthorized Use:
GDPR Compliance:
Liferay DXP supports GDPR compliance by providing features such as data export, data erasure, and user permissions. The platform's flexible architecture allows businesses to adapt to GDPR requirements and prevent vendor lock-in by enabling data portability.
NIST Compliance:
Liferay DXP complies with various NIST standards, including FIPS 140-2, NIST SP 800-53, and NIST SP 800-171. These standards outline cybersecurity requirements for government agencies, contractors, and other organizations handling sensitive information.
Compliance with these standards involves implementing multi-layer security, encryption, access control, and continuous monitoring, among other measures.
ISO 27001:
Liferay DXP is certified for ISO 27001, which is an international standard for information security management systems (ISMS). This certification demonstrates Liferay's commitment to maintaining robust security practices and protecting customer data
SOC 2 Type 2
Liferay DXP has obtained SOC 2 Type 2 certification, which focuses on the security, availability, processing integrity, confidentiality, and privacy of customer data. This certification is particularly important for organizations that handle sensitive information and require assurance of their service providers' security practices.
HIPAA Compliance:
Liferay DXP meets the requirements of the Health Insurance Portability and Accountability Act (HIPAA), ensuring that the platform can be used to handle protected health information (PHI) in a secure and compliant manner.
EU-U.S. and Swiss-U.S. Privacy Shield Frameworks:
