iXXo has industrialized blockchain node deployment on the cloud. It uses Kubernetes on Azure. Private keys are stored in a secured vault (Azure vault), similar to a ledgerHQ device but on the cloud, and all transactions are signed offline.
Each blockchain user has his own running instance and only the user can access to his private key and download it, iXXo is unable to do so.
As a result, the decentralized application user can access a dedicated web server running a blockchain node instance for his app, and he cannot see the difference from usual websites, since he accesses his decentralized application under an URL such as dappname.io/username.
On the dedicated user webserver (created on-demand through Kubernetes deployment automation), a crypto wallet is installed for the user to safely manage his own tokens independently from the application.