- TOMORIS
- Industries
- Healthcare & medical practices
FOR SENSITIVE DATA
Your attention belongs to people.
Medical practices and healthcare facilities need reliable systems. We secure the technical foundation and coordinate interfaces with your specialist software vendors.
HEALTHCARE & MEDICAL PRACTICES / STARTING POINT
What shapes
your everyday work.
- 01
Downtime means a full waiting room
Without practice software, transmission of medical findings and card readers, the medical practice comes to a standstill.
- 02
Documentation over years
Medical records must be kept for at least ten years. Backup and recovery have to hold up for that long.
- 03
Many parties involved
Practice software, laboratories, devices and network operators interlock. Responsibilities must be clear.
HOW WE IMPLEMENT IT
Concrete
solutions.
- TOMORIS EXPERTS
Workplaces by protection requirements
Hardening, device protection and access rules for reception, treatment rooms and administration.
View Cyber security - TOMORIS GRID
Backup over years
Data backup with retention rules and a recovery plan, coordinated with your specialist software vendor.
View GRID.vault - TOMORIS GRID
Updates with a plan
Patches in agreed maintenance windows so that practice hours stay free.
View GRID.patch - OWN SOFTWARE
Share credentials securely
Pass on passwords and access details via an encrypted, expiring link instead of by email.
View GRID.WHISPER - TOMORIS UNIVERSITY
Raise team awareness
Recognize phishing, share patient data correctly, report suspicious cases.
View Security awareness
HEALTHCARE & MEDICAL PRACTICES / YOUR BENEFIT
What you
gain.
- 01
Protect data deliberately
Design access and workplaces according to protection needs.
- 02
Plan reliable operations
Take dependencies, backup and recovery into account.
- 03
Relieve teams
Clear reporting channels and agreed responsibilities.
SERVICES & SCOPE
Responsibility starts with clarity.
We clarify in advance which services make sense, who is responsible for what and how you can tell that progress is being made.
- Protected workplaces
- Network and WLAN
- Data backup and recovery planning
- Coordination with specialist software vendors
- Security awareness
FRAMEWORK & OBLIGATIONS
What laws and
standards require.
- GDPR
Health data
Health data is a special category of personal data (Art. 9 GDPR). For electronic transmission, the GTelG 2012 requires, among other things, verification of identity and secured networks or procedures in line with the state of the art (§§ 4 and 6).
- LAW
Ten years of documentation
Physicians keep their records and the related documents for at least ten years (§ 51(3) ÄrzteG 1998).
- NISG 2026 (NIS2)
NIS2 in your sector
Healthcare providers are a sector in Annex 1 of the Austrian NIS Act (NISG 2026), generally covered from medium enterprise size upward (§ 25). The sector-specific CSIRT is Austrian HealthCERT (§ 8a GTelG 2012).
START FOR FREE
Check it
today.
Maturity check for medical practices
For doctors’ offices and clinics
- 12 Fragen, je mit Quelle
- GTelG 2012, ÄrzteG, DSGVO
- Reifegrad mit Maßnahmen
- Läuft nur im Browser
- SHARE SECURELY
GRID.WHISPER
Share passwords securely
Open (German) - FREE CHECK
Email security check
Check SPF, DKIM, DMARC
Open (German) - DOWNLOAD
Backup-Checkliste 3-2-1-1-0
Drei Kopien, zwei Medien, eine außer Haus, eine offline, null Fehler beim Wiederherstellungstest: Datensicherung zum Abhaken, belegt mit BSI und CISA.
View and download (German)
WHAT SETS US APART
One partner.
Not four.
- 01FROM A SINGLE SOURCE
Projects, operations, knowledge, software
EXPERTS implements, GRID operates, UNIVERSITY enables your team, NEXT develops further – without handover gaps between different service providers.
- 02OWN PLATFORM
Operations with GRID
Monitoring, backup, security and updates work together in one operating model with clear responsibility.
- 03TRANSPARENCY
Everything in view with INSIGHT
Tickets, reports and roadmap in one role-based customer portal instead of scattered across emails.
- 04PROXIMITY
Personal in DACH
Locations in Marchtrenk, Frankfurt am Main and Zurich – with personal points of contact.
FREQUENTLY ASKED QUESTIONS
Answered
briefly.
Is our medical practice subject to NIS2?
Healthcare providers are a sector under the Austrian NIS Act (NISG 2026), generally covered from medium size upward: from 50 employees or with more than €10 million in both turnover and balance sheet total. For smaller practices, the GDPR and professional law remain decisive. The NIS2 applicability check reviews this with section references.
Does TOMORIS work with our practice software vendor?
Yes. We coordinate interfaces, updates and responsibilities with your specialist software vendors; the vendor supports the specialist application itself.
How long do we have to back up data?
Medical records must be kept for at least ten years. We align backup and archiving with this and test recovery as agreed.
THINKING AHEAD
What goes with it.
- FOR SCHOOLS & EDUCATION PROVIDERS
Education & schools
Student devices, classrooms, administration and learning platforms: we set up devices, accounts and networks so that teachers teach instead of administering.
Learn more - FOR KINDERGARTEN, TODDLER GROUP & AFTER-SCHOOL CARE
Kindergartens & early childhood education
Observation, documentation, parent communication and organization take time. PIA and secure IT give teams in kindergarten and after-school care more of it back.
Learn more - FOR CARE & SOCIAL SERVICES
Care & social services
Care homes, mobile services and social institutions document around the clock. We ensure available systems, protected data and managed devices.
Learn more
- Non-profits & associations
- Industry & manufacturing
- Businesses & service providers
- Retail & e-commerce
- Logistics & transport
- Construction, architecture & real estate
- Skilled trades
- Tourism & hospitality
- Public sector
- Municipalities
- Energy & utilities
- Military & security agencies
- Notaries & law firms
- Tax advisory
- Financial services & insurance
YOUR NEXT STEP
Let’s take the
next step.
Discuss your requirements. Personal and without obligation.