BUILT FOR RELIABILITY: HOW AMERICAN EXPRESS PROCESSES PAYMENTS AT SCALE

Summary from the TLDR Data newsletter

American Express uses cells as complete payment-processing failure domains: microservices, databases, DNS, and reference data are local, while dynamic transactions are routed to the cell that owns their state. The design trades global coordination for controlled failure scope and deliberately rejects transactions when consistency cannot be established.