[DKR fmt07& FMTahw3@<BIPWdkr 5$[DKRYfm6%]EL Zgnu18!}GN
The complete secure data infrastructure platform for healthcare — storage, access control, audit, integration, deployment and intelligence. Built for Swiss FADP and HIPAA from the ground up, operated entirely inside Switzerland.
Not an encrypted folder.
A complete data platform for healthcare.
Healthcare organisations do not have a storage problem. They have a storage, access, evidence, interoperability and deployment problem — usually solved by five vendors who do not speak to each other. MediVault is those five layers, built as one platform, operated entirely inside Switzerland.
The buyer is an organisation,
not an individual patient.
MediVault is sold to and operated by healthcare organisations. Patients benefit from it — through faster access, provable consent and a real record of who has seen their file — but the customer, the contract and the accountability sit with the provider.
Everyone says Swiss.
Very few mean the jurisdiction.
Swiss-hosted is a marketing line. Swiss-resident is a legal position you can be held to — one company, one country, one supervisory authority, and no clause anywhere that lets your patients' records be read under another nation's law.
- 100%
- Data resident in Switzerland
- 0
- Foreign jurisdiction exposure
- FADP
- Swiss law, in force 2023
- EDÖB
- Supervisory authority, Bern
The vault, explained
without the marketing.
Three questions decide whether a hospital executive trusts a data platform: what goes in it, who can get it out, and what happens the moment somebody tries. Here are the answers.
Medical records
Structured encounters, diagnoses, medications, allergies
Clinical documents
Discharge letters, consultation notes, operative reports
Diagnostic reports
Radiology, pathology and cardiology reporting
Imaging metadata
DICOM study index and pointers; pixel data stays in PACS
Laboratory information
Orders, results, reference ranges, LOINC-coded panels
Referral documents
Inbound and outbound referrals with routing history
Treatment records
Care plans, procedures, therapy and follow-up schedules
Patient forms
Consent, intake, questionnaires and signed declarations
Insurance documentation
Coverage confirmations, guarantees, claim attachments
Administrative records
Identifiers, contact data, correspondence, mandates
Imaging note: MediVault indexes DICOM study metadata and holds pointers into your PACS. Pixel data stays where your radiology workflow already expects it — we do not ask you to migrate your archive.
Vault architectureEight products.
One platform.
Each pillar is a product a healthcare organisation could buy on its own. Together they remove the seams — the gaps between vendors where compliance failures and integration projects usually live.
Security nobody uses
protects nobody.
A control that adds seconds to a ward round gets routed around, and a system clinicians resent becomes a shadow drive full of unencrypted PDFs. MediVault is built to disappear into the working day — 38 ms to an authorised record, on the device already in their hand.
- 38 ms
- Median authorised read
- 4
- Interface languages
- WCAG 2.2 AA
- Accessibility conformance
- 3 days
- Typical clinic go-live
Certified to the
highest standard.
From Swiss FADP to HIPAA, our compliance posture is independently audited, continuously monitored, and fully documented. We publish our audit reports annually.
The revised Federal Act on Data Protection (Datenschutzgesetz) came into force on 1 September 2023. MediVault was re-architected ahead of this transition. Our implementation covers all requirements under Art. 8 (Data Security), Art. 25 (Privacy by Design), and Art. 30 (Data Processor Agreements).
Two rooms decide
whether this works.
The front desk, where a record is created under time pressure by someone who is not a clinician. And the ward, where it is read by someone with four minutes and a patient waiting. Everything in the architecture is answerable to those two rooms.
It has to work with
what you already run.
No hospital replaces its estate to adopt a vault. MediVault connects to the systems already in the building through HL7 FHIR R4, an HL7 v2 bridge, REST endpoints, signed webhooks and first-party SDKs.
- EHR / EMR
- Hospital information systems
- Patient portals
- Laboratory (LIS)
- Imaging (RIS / PACS)
- Pathology
- Pharmacy
- Billing & TARMED
- Scheduling
- Healthcare apps
- Analytics platforms
- Research registries
GET /fhir/r4/Patient?identifier=756.1234.5678.97
Host: api.medivaultzurich.site
Authorization: Bearer {access_token}
X-MV-Purpose-Of-Use: TREATMENT
Accept: application/fhir+json
200 OK
{
"resourceType": "Bundle",
"type": "searchset",
"total": 1,
"entry": [{
"resource": {
"resourceType": "Patient",
"id": "pat_8f2c41ba",
"meta": { "versionId": "14", "security": [
{ "code": "R", "display": "Restricted" }
]},
"active": true
}
}]
}
Data residency is a
legal position, not a claim.
Every byte of production patient data lives in Tier IV facilities we can name, in cantons we can point to, under Swiss law. No processing, no backup, no support access and no telemetry leaves Swiss jurisdiction — including ours.
- 3
- Swiss facilities
- Tier IV
- Primary and replica
- 15 min
- Disaster recovery RPO
- 0
- Bytes leaving Switzerland
Swiss soil.
Swiss jurisdiction.
Data residency is a legal position, not a marketing claim. Every byte of production patient data lives in facilities we can name, in cantons we can point to, under Swiss law — with a documented deployment model for organisations that need it inside their own walls.
Rümlang, ZH
Primary production vault
- Role
- Active — read / write primary
- Resilience
- 2N power · N+1 cooling
- Latency
- < 4 ms to Zürich metro
- Attested
- ISO 27001 · ISO 50001 · biometric multi-zone access
Glattbrugg, ZH
Synchronous replica
- Role
- Active — synchronous replication
- Resilience
- 2N power · N+1 cooling
- Latency
- < 2 ms inter-site RTT
- Attested
- ISO 27001 · ISO 22301 business continuity
Meyrin, GE
Disaster recovery vault
- Role
- Warm standby — 15 min RPO
- Resilience
- N+1 power and cooling
- Latency
- < 9 ms Zürich → Genève
- Attested
- ISO 27001 · Swiss data-residency attested
Swiss cloud
Multi-tenant, fully managed, hosted in our Zürich Tier IV facilities.
Private cloud
Single-tenant instance with dedicated compute, storage and key hierarchy.
On-premise
Deployed inside your own data centre, operated by your team or ours.
Hybrid
Keys and sensitive shards on-premise, scale and DR in the Swiss cloud.
Air-gapped
No external network path. Updates delivered by signed, verified media.
Watch encryption
happen live.
Our portal encrypts data client-side before it ever leaves your browser. The terminal below simulates a single patient record write — exactly as it happens in production.
Keys never touch our servers. Derived from your identity token using PBKDF2 with 310,000 iterations.
Authenticated encryption ensures both confidentiality and integrity. Any tampering is detected.
The encrypted payload is sealed with a hardware security module. Physical tamper-evidence guaranteed.
Data is split across geographically separated Swiss data centres. No single point holds a complete record.
No surprises.
Swiss precision.
All plans billed in CHF. No currency risk, no hidden fees. Annual billing available at a 20% discount.
For private clinics and specialist practices with up to 500 active patients.
Start with Klinik- Up to 500 patient records
- AES-256 encryption at rest
- TLS 1.3 in transit
- FADP & HIPAA compliant
- HL7 FHIR R4 API
- Audit trail (90 days)
- Email support (48h SLA)
For hospitals and multi-site practices managing thousands of records.
Start with Spital- Up to 5,000 patient records
- All Klinik features
- HSM-backed key management
- Granular RBAC permissions
- Audit trail (365 days)
- SIEM integration
- Priority support (4h SLA)
- Dedicated CSM
For large hospital networks and canton health systems with custom requirements.
Contact Sales- Unlimited patient records
- All Spital features
- On-premise deployment option
- Custom data residency SLA
- Air-gap vault mode
- Zero-knowledge architecture
- 24/7 dedicated support
- Annual penetration test
All prices in Swiss Francs (CHF) · VAT (MWST) may apply · No credit card required
Your patients deserve
better protection.
Request a demo, book a technical deep-dive with our Zürich engineering team, or send us your security questionnaire — we answer it in full before you sign anything.
Data hosted exclusively in Switzerland · No US data transfer · FADP compliant