Federated records, local sovereignty, group-wide governance.
Per-tenant key hierarchies under group governance: sites keep operational independence while the group gets consolidated audit and policy control.
- Key isolation
- Per-site
- Compliance reporting
- Group-wide
- P1 response SLA
- 30 min
- Plan
- Unternehmen
Built for what
you are actually dealing with.
Each site has its own systems, its own governance history and its own cantonal obligations — but the group is accountable as one entity.
- Per-site
- Key isolation
- Group-wide
- Compliance reporting
- 30 min
- P1 response SLA
What we usually
find on arrival.
Each site has its own systems, its own governance history and its own cantonal obligations — but the group is accountable as one entity.
Multi-site · multi-canton · shared services
Per-tenant key hierarchies under group governance: sites keep operational independence while the group gets consolidated audit and policy control.
How this
actually runs.
A real timeline with named gates, not a marketing promise. Every stage has a written acceptance point before the next one starts.
Governance model
We define what the group controls centrally and what each site retains — usually the hardest conversation in the whole programme.
Key hierarchy
Per-site key isolation under a group root, so a compromise at one site cannot expose another site's records.
Site-by-site rollout
Each site migrates on its own schedule against a common template. Sites do not wait on each other's readiness.
Group console live
Consolidated audit, policy management and compliance reporting across every site, with per-site drill-down.
The things you are
actually worried about.
- Can sites keep autonomy?
- Yes. Sites retain operational control of their own tenant and their own policies within group-defined bounds. The group gets visibility and policy floors, not day-to-day control.
- Multi-canton obligations
- Residency and retention rules are configured per site, so a site in one canton can meet obligations that differ from a site in another, under one group contract.
- What if a site leaves the group?
- Tenant separation is a supported operation. The departing site takes its data, its keys and its audit history intact, without a migration project.
- Consolidated reporting
- Group-wide compliance reporting without group-wide clinical access. Governance staff see the metrics and the events; they do not see patient content.
Not quite
your situation?
Scope it against
your real numbers.
Send us your site count, record volume, existing systems and governance requirements. We come back with a written scope, a timeline and a price — or an honest reason why we are not the right fit.
Unternehmen — custom