SIRIUSRAD SECURITY
Security across every layer of the operation
SiriusRAD applies security controls across the application, infrastructure, communications and integration layers to protect medical imaging, reporting and operational workflows.
Our architecture combines encrypted communications, access controls, continuous monitoring and continuity practices to reduce risk across the operation.
Contact SiriusRADA layered approach to security
Application, communications, infrastructure, monitoring and continuity controls work together to reduce exposure to risk and support consistent service delivery.
Application
Session context, validation and controlled data access.
Communications
HTTPS and TLS for configured protected communication flows.
Infrastructure
Private-cloud firewall, load balancing and network controls.
Monitoring
Continuous server monitoring supports technical intervention.
Continuity
Offsite backups and server snapshots support recovery planning.
Application security
The application layer includes controls designed to protect identifiers used in session context, restrict communication between application components and reduce direct database exposure. Database access is mediated through an ORM layer, reducing the need for direct SQL access in application logic. Forms and sensitive operations use validation controls and protection against unauthorized form tampering.
- Protection of identifiers used in session context
- Controlled communication between application components
- Database access mediated through an ORM layer
- Validation controls for forms and sensitive operations
Protected communications
Web interfaces use HTTPS and TLS to protect communications between users, systems and services. On configured secure transport flows, SiriusRAD Gateway also uses TLS for integration communications.
Infrastructure and datacenter protection
The infrastructure uses private-cloud firewall controls, continuous server monitoring, load balancing and network controls designed to support availability, traffic management and operational resilience.
Backup and operational continuity
SiriusRAD maintains daily offsite database backups and weekly server snapshots as part of the platform’s continuity and recovery strategy. Recovery objectives and retention requirements are assessed according to each operation.
Continuous monitoring
SiriusRAD servers are continuously monitored to support the identification of service disruptions, operational anomalies and conditions that may require technical intervention.
REST API for integrations
The SiriusRAD REST API supports controlled integrations through institution-managed keys. These keys authorize access to supported integration services and can be managed according to each organization’s operational requirements.
- Institution-managed integration keys
- Controlled integration access
- HTTPS/TLS communications
- Reporting and system integrations
SiriusRAD Gateway
SiriusRAD Gateway acts as the DICOM integration layer between Workstations, PACS and the SiriusRAD platform. It can receive and transmit DICOM images through multiple connections and use TLS on configured secure transport flows.
- 1Modality / Workstation / PACS
- 2SiriusRAD Gateway
- 3Configured TLS connection
- 4SiriusRAD Platform
Security as a continuous process
Security does not depend on a single feature. It requires architecture, monitoring, access control, maintenance, operational practices and continuous review. SiriusRAD treats security as an ongoing part of platform development and operations.
Want to understand how SiriusRAD protects your operation?
Talk with our team about integrations, connectivity, infrastructure and the controls used across the platform.