IT architecture overview for on-prem clients
The On-Premise Client (OPC) establishes a secure, outbound-only connection between your local environment (such as SAP or Oracle) and the Celonis Platform. This architecture enables continuous data extraction and automated write-back capabilities without requiring incoming firewall ports to be opened.
Data Acquisition (Inbound)
The secure transfer of local event logs and master data to the Celonis Cloud.
SAP ECC and S/4HANA: Native, high-performance extraction of tables and configuration metadata. See: SAP ECC and S/4HANA data extraction overview.
Custom Data Sources: Configurable database connections for extracting legacy or non-standard system logs.
Process Automation (Outbound)
The execution of operational instructions from the Celonis Cloud directly into local source tools.
System Write-Back: Automated record modifications, such as updating invoice blocks or master data registries, triggered from an Action Flow.
Generic HTTP App: Extensible REST API connections to integrate local downstream software within the automation stack.
Deep-dive IT architecture for on-premise connection
The following diagrams illustrate the architectural relationship between your local environment and the Celonis Platform.
The first image defines the System Landscape, showing how the OPC bridges the gap to various on-premise applications.

The second image details the Logical Communication Flow, highlighting the outbound-only polling mechanism that maintains your firewall integrity.
