One foundation

Built as layers.

A standards-native architecture that connects imaging, archive, AI, workflow, content security, and post-quantum transport—without closing the institution into a proprietary stack.

Explore the architecture

Start at the layer that matters to you.

Each layer can stand on its own. Together, they connect a working PACS with AI-enabled, post-quantum-ready imaging infrastructure.

Product layers

Seven focused products. One coherent imaging stack.

DICOMUnity supplies the shared protocol foundation. Products above it address distinct operational responsibilities while continuing to interoperate through DICOM, HL7, FHIR, and IHE-aligned interfaces.

04Clinical experience & workflow
DICOMAgent Native viewer and the user-facing AI entry point. RISArella Scheduling, reporting, HL7, FHIR, and radiology workflow.
03Secure site transport
DICOMAgentRouter Post-quantum site-to-site DICOM relay over a firewall-friendly tunnel.
02Protected archive & intelligence
DICOM Application Firewall DICOM-layer inspection before the PACS.
PACSFolio Standards-native PACS and archive infrastructure. DICOMBrain On-premise AI for institutional imaging data.
01Protocol foundation
DICOMUnity Pure-Rust DICOM foundation for every product.
01 The foundation

Built from the DICOM standard, not inherited technical debt.

DICOMUnity is a clean-room, Rust-native implementation of NEMA PS3.x. It provides the common data model, network protocol, DIMSE services, codecs, character sets, and clinical-object support used across the ecosystem.

Memory-safe by designRust eliminates entire classes of memory errors at compile time without garbage-collection pauses. Async-first networkingConcurrent DICOM associations share an efficient runtime instead of a thread-per-connection model. Modular and replaceableFocused core, protocol, and codec layers keep product code composable and independently testable.
View DICOMUnity
02 Secure transport

Protect the channel without changing the DICOM protocol.

DICOMAgentRouter relays standard DICOM between sites through a post-quantum encrypted tunnel. The viewer and PACS continue to use familiar associations, SOP classes, and transfer syntaxes; protection sits between the endpoints.

DICOM Application Firewall adds protection at the DICOM semantic layer. It operates inside an existing DICOM network to protect the PACS from malformed or malicious DICOM objects, unsafe tag content, unauthorized AE titles, and disallowed SOP classes before they reach the archive. When combined with a DICOMAgentRouter tunnel, it can work alongside leading enterprise web application firewalls: the WAF protects web applications and HTTP traffic, DICOMAgentRouter protects the transport channel, and DICOM Application Firewall enforces policy inside DICOM communication.

Viewer / modalityDICOMAgentRouterAQuantum-safe cryptographyDICOMAgentRouterBPACS / VNA
View DICOMAgentRouter
03 On-premise AI

Bring the model to the archive. Keep institutional knowledge inside.

DICOMBrain is designed to run RAG indexing, parameter adjustment, inference, and model serving inside the facility network. After a one-time foundation-model download, images, reports, prompts, embeddings, and adjusted model parameters remain under institutional control.

Local retrievalGround responses in the institution’s own reports and imaging history. Local parameter adjustmentAdapt foundation models on facility-owned GPU hardware without transferring patient data. Local inference APIServe DICOMAgent, RISArella, or third-party clinical applications over the facility LAN.
View DICOMBrain
04 Quantum readiness

Crypto-agility separates the security mechanism from the imaging workflow.

The architecture combines NIST-standardized post-quantum key exchange with authenticated payload encryption. A crypto-agile seam separates key sources from the DICOM relay, allowing different security mechanisms to connect without redesigning the protocol or product layer.

Alongside the software architecture, our chip-design team is actively developing a dedicated photonic security chip to bring quantum entropy, key distribution, and cryptographic acceleration into the same interface.

  1. Software PQCPost-quantum key exchange with authenticated payload encryption.
  2. Photonic QRNGTrue quantum entropy as a source for cryptographic key material.
  3. QKD interfaceQuantum-distributed key material for suitable site-to-site fiber links.
  4. Integrated photonicsQRNG, QKD, and PQC acceleration through a dedicated photonic interface.
Discuss quantum readiness
05 AI readiness

Put AI in the imaging loop without giving up operational control.

AI readiness is more than deploying a model. The archive, reports, identity, governance, compute, and clinical interfaces must form a controlled loop. DICOMBrain supplies the intelligence layer; DICOMAgent becomes the authorized conversational and workflow surface.

PACSFolio / existing PACSStudies + reports → DICOMBrainRAG + adjustment + inference → DICOMAgent / clinical systemsAuthorized interaction ↺
Discuss AI readiness
06 Archive infrastructure

PACSFolio architecture across single-server, enterprise, and cloud environments.

PACSFolio separates imaging metadata from pixel storage and uses the same standards-native DICOM foundation across its deployment models.

PACSFolio Single Server PACSFolio Enterprise PACSFolio Cloud VNA
View PACSFolio
Open at every boundary

Products compose internally and connect externally through healthcare standards.

DICOMData, networking, DIMSE, codecs, and clinical objects. HL7 v2ADT, order, and result workflows through PACSFolio Enterprise and RISArella. FHIR R4 + IHEModern API and cross-enterprise integration through RISArella. OMOP CDMOn-premise imaging metadata and report export through DICOMBrain.

Choose the layers that fit.
Keep every boundary interoperable.

Explore the seven products or speak with us about quantum and AI readiness for your existing imaging environment.

Start a conversation