Vault infrastructure that survives your security review.
HSM-backed key management, granular RBAC, SIEM streaming and certified EHR connectors — deployed alongside the systems already in production.
- Priority support SLA
- 4 h
- Audit trail retention
- 365 d
- Certified EHR connectors
- 18
- Plan
- Spital
Built for what
you are actually dealing with.
The CISO needs cryptographic assurance, the CIO needs FHIR integration, and the clinical directorate needs it to be invisible at the bedside.
- 4 h
- Priority support SLA
- 365 d
- Audit trail retention
- 18
- Certified EHR connectors
What we usually
find on arrival.
The CISO needs cryptographic assurance, the CIO needs FHIR integration, and the clinical directorate needs it to be invisible at the bedside.
Acute care · 5,000+ records · 24/7 operations
HSM-backed key management, granular RBAC, SIEM streaming and certified EHR connectors — deployed alongside the systems already in production.
How this
actually runs.
A real timeline with named gates, not a marketing promise. Every stage has a written acceptance point before the next one starts.
Architecture review
Joint session with your CISO, CIO and clinical governance lead. We answer your security questionnaire in writing before scoping.
Integration build
Connectors to your EHR, LIS and RIS/PACS, plus ADT feed ingestion. Certified against your live interfaces, not a reference implementation.
Migration dry-run
Full rehearsal against a de-identified extract with record-level reconciliation. Nothing goes live on a first attempt.
Staged cutover
Department by department, with parallel running, out-of-hours windows and a documented rollback plan at every gate.
The things you are
actually worried about.
- Will this slow clinicians down?
- Median authorised read is 38 ms (p50) and 94 ms (p95), including the audit write. If a security control makes a bedside workflow slower, clinicians route around it — so we treat latency as a safety requirement.
- What does the CISO get?
- SOC 2 Type II report, ISO 27001 certificate, pen-test summary, architecture documentation, sub-processor register and the shared-responsibility matrix — all before contract.
- SIEM integration
- Certified connectors for Splunk, Microsoft Sentinel, IBM QRadar and Elastic. Generic syslog-TLS streaming for anything else, at full event fidelity.
- Emergency access
- Break-glass is always available and never disableable, because blocking emergency care is a clinical safety hazard. It is governed by mandatory 24-hour review, not prevented.
Not quite
your situation?
Scope it against
your real numbers.
Send us your site count, record volume, existing systems and governance requirements. We come back with a written scope, a timeline and a price — or an honest reason why we are not the right fit.
Spital — CHF 1,299 / month