The platform is a three-tier application. A browser client talks over HTTPS to a stateless REST backend, which is the only component that touches the database.