The Year a Hospital Network Changed PACS Providers: An Evaluation Story

A composite narrative of a 5-site hospital network evaluating PACS providers — the shortlist, the SLA that failed scrutiny, and how the switch happened without downtime.

The Year a Hospital Network Changed PACS Providers: An Evaluation Story

The decision to change PACS providers almost never begins with a catastrophe. It begins with a spreadsheet. This is a composite account — assembled from patterns RAD365 sees repeatedly across hospital assessments, with details changed and no real organisation identified — of how a five-site network with roughly 190,000 studies a year worked out that its support arrangement had stopped being an arrangement at all, and what the eleven months that followed actually looked like.

Scope note: RAD365 operates radiology infrastructure — uptime, DICOM connectivity, integrations, migrations, storage and vendor management. We do not read or interpret studies. Nothing below concerns clinical interpretation.

January: the spreadsheet

The imaging director had been asked for a three-year cost projection. Building it meant listing what was actually being paid for, and that turned out to be harder than expected. There was the PACS licence and its bundled support. There was a separate contract with the modality supplier at two sites. There was a regional IT firm on a break-fix hourly arrangement for anything network-adjacent. There was an integration consultancy retained by the day for interface work. And there was one PACS administrator, twelve years in post, who in practice absorbed everything that fell between those four contracts — which was most things.

The projection was not the problem. The problem was the column she added next to it, listing who owned each of the previous year's fourteen significant incidents. In nine cases the honest answer was "the administrator, personally, on her own time."

9 of 14 incidents had no contractual owner

The network was paying four separate suppliers and still had no single party accountable for the majority of its imaging incidents. This is the most common finding in RAD365 environment assessments — not an absence of contracts, but an absence of ownership between them.

March: reading the incumbent's SLA properly

The incumbent's contract promised a four-hour response on critical issues. Under scrutiny three things emerged. "Response" meant an automated ticket acknowledgement, not an engineer. The clock started when the ticket was logged in the vendor's portal, not when imaging stopped — and out of hours, nobody was logging tickets. And "critical" was defined by the vendor's own product severity scale, so an incident where studies were reaching the archive but not reaching the reading room was a P3, because the product was technically functioning.

None of this was dishonest. It was a product support contract being asked to behave like an operational support contract, which is a category error that costs hospitals real money. The distinction between the two is the thing the whole evaluation eventually turned on, and it is worth understanding before any procurement starts — the structured version is set out in the RAD365 managed PACS services scope.

April: PACS system vendors versus PACS support providers

The network's first shortlist mixed the two categories together, and the proposals were incomparable as a result. Separating them clarified everything.

What PACS system vendors sell — and where their obligation stops

PACS system vendors build and license the imaging application: the archive, the viewer, the worklist, the administration tooling. Their support obligation covers defects in that product and configuration questions about it. That is a legitimate and necessary thing to buy. What it does not cover is the environment the product runs inside — the imaging VLAN, the storage array, the interface engine belonging to another vendor, the modality fleet, the identity service, the diagnostic displays. A vendor cannot reasonably be asked to own faults in systems they did not build and cannot see.

When comparing PACS system vendors against PACS support providers, the network eventually used a single framing question: if this incident spans two suppliers' products, who is contractually obliged to resolve it? Vendors answer "our part." Support providers answer "all of it." Both answers are honest; only one of them closes the gap in the spreadsheet.

The comparison the network ended up using

DimensionPACS system vendorPACS support provider
Primary productImaging software licenceOperation of your environment
Scope boundaryTheir own applicationEstate-wide, vendor-agnostic
Multi-vendor incidentTheir component onlySingle accountable owner
Network and storage layerOut of scopeMonitored and supported
Severity definitionProduct functionalityClinical impact
Roadmap incentiveSell more of their platformNeutral on platform choice
Migration off the platformStructurally disincentivisedDelivered as a service
Typical pricingLicence plus support percentageFlat fee scoped to estate

June: the four-question technical call

Four providers reached the technical stage. The network's administrator ran each call herself and asked the same four questions, which turned out to be more discriminating than the entire written RFP.

  1. "A modality intermittently fails association, but only on large CT series. Walk me through your first hour." Two providers described opening a vendor ticket. Two described association logs, transfer syntax negotiation, MTU and fragmentation behaviour, and a packet capture. That single question halved the shortlist.
  2. "When did you last restore a study from a client's backup and verify it opened?" One provider named a date and offered the report. The other described their backup monitoring, which is a different question.
  3. "Describe an incident that spanned two vendors' products and what each vendor's support initially said." The answer reveals whether a provider actually owns cases or forwards them.
  4. "Show me last quarter's SLA attainment across your book of business, including the misses." A provider that measures itself produces this in a day.

The four questions map closely onto the operating disciplines documented in the PACS support framework, which is not coincidental — they were chosen to test whether a framework exists in practice rather than in a proposal.

September: transition without downtime

The transition ran as an overlap, not a cutover. For six weeks both arrangements were live. The incoming team ran discovery across all five sites and produced a current-state document the network had never possessed. Monitoring went in parallel while the incumbent was still contractually responsible, which had the useful side effect of quantifying the baseline before anyone could claim credit for improving it. Read-only access first, then P3 categories, then P2, then P1 in the final fortnight. Credentials, runbooks and monitoring configuration transferred before the end date rather than on it.

Two things made the overlap work. The old contract's exit clause, negotiated years earlier, happened to require documentation hand-over — a clause that had seemed like boilerplate and turned out to be worth months. And the network resisted the temptation to bundle a platform migration into the same window. That came later, planned separately as PACS migration services work with its own reconciliation and parallel-run period, which is the only sane way to do it.

The following March: what actually changed

Total supplier spend was roughly flat. That surprised the finance committee, which had expected either a saving or an increase. What changed was distribution and accountability: four contracts became two, nine ownerless incidents became zero, and the administrator stopped being the escalation path of last resort — she moved to clinical workflow and hanging-protocol work, which was what the department had hired her for twelve years earlier.

The measurable items were unglamorous. Mean time to engagement on out-of-hours incidents fell from "the next morning" to inside the contracted window. A restore test ran quarterly with a written result. The archive capacity projection stopped being an annual surprise. Two recurring incident classes — a routing fault at the smallest site and an interface mismatch after every RIS update — were eliminated rather than repeatedly fixed, which is the difference a flat-fee incentive actually buys. Departments running the same evaluation against a single site or a shorter horizon often start with radiology PACS support scoped narrowly, then widen it once the model has proven itself.

If you are at the spreadsheet stage

  1. List last year's significant incidents and name the contractual owner of each. Blank rows are your real finding.
  2. Read your current SLA's definitions section — response, severity, clock start — before its promises.
  3. Separate vendors from support providers in the shortlist so proposals are comparable.
  4. Run the technical call yourself with your own administrator asking the questions.
  5. Plan an overlap, not a cutover, and keep any platform migration in a separate window.

Get a free PACS assessment

Talk to a RAD365 PACS engineer about coverage, migration, or interim support for your environment. No obligation, no sales pitch.

Get a free PACS assessment →

PACS providers: frequently asked questions

Choosing between PACS providers

Who are the best PACS support providers for large hospital networks?

There is no single correct answer, because the right provider depends on your vendor mix, site count and coverage requirement. The field divides into three groups: PACS software vendors offering support around their own product, large generalist healthcare IT firms where imaging is one line of business, and independent specialists whose entire practice is imaging infrastructure. Large networks running more than one PACS after acquisitions usually need the third category, because only a vendor-agnostic provider can own an incident that crosses products. RAD365 operates in that independent, vendor-agnostic category.

What criteria distinguish the best PACS support providers from average vendors?

Seven criteria separate them consistently: monitoring depth that reaches listeners, queues, interfaces and restores rather than a simple availability ping; SLAs that are measured and reported monthly rather than merely stated; genuinely staffed after-hours cover with change authority; ownership of multi-vendor cases instead of forwarding them; scheduled restore and DR verification with evidence; migration methodology that is counted, verified and reversible; and a written exit clause. Average providers assert these. Strong providers evidence them.

How do the best PACS support providers handle system migrations and upgrades?

With reconciliation, not bulk copy. A defensible migration inventories the source archive by study, series and instance count, migrates in verified batches with automated comparison against source counts, preserves metadata and prior linkage, runs a parallel period where both systems are live and readable, reconciles exceptions individually, and keeps a documented rollback path until sign-off. Upgrades follow the same discipline scaled down: pre-change verification of routes and interfaces, an imaging-aware change window, post-change validation, and a rollback plan agreed before anyone touches production.

What certifications should the best PACS support providers hold for healthcare IT compliance?

At an organisational level, look for a SOC 2 Type II report, demonstrable HIPAA and HITECH programme maturity, and a willingness to sign a Business Associate Agreement without negotiation drama. At an engineer level, look for CIIP among senior imaging staff, ITIL for service-management discipline, vendor-specific PACS and modality training matching your estate, and core infrastructure credentials in networking, storage, virtualisation and security. Ask for the SOC 2 report and the access-review evidence, not just the certificate logos.

How can I compare the best PACS support providers based on customer reviews and service quality?

Public reviews are thin in this market, so weight reference calls heavily and choose them yourself rather than accepting a curated list. Ask each reference for a specific recent P1: what happened, how fast someone engaged, who owned the vendor case, and what the post-incident report contained. Ask what the provider has done badly and how they handled it. Then ask for SLA attainment reports from the last two quarters — a provider that measures its own performance will produce them immediately, and one that does not will explain why they cannot.

PACS vendors versus PACS support providers

What's the difference between a PACS vendor and a PACS support provider?

A PACS vendor builds and licenses the imaging software; their support obligation ends at the boundary of their own product. A PACS support provider operates your environment — routing, interfaces, storage, network, monitoring, incident response and vendor escalation — regardless of whose logo is on the software. The two are complementary rather than competing. Problems arise when a hospital assumes the vendor contract constitutes operational support, then discovers at 2am that the incident sits between two products and neither vendor owns it.

Can a PACS provider support multiple PACS vendors at once (vendor-agnostic)?

Yes, and for any multi-site or post-acquisition estate it is close to essential. Vendor-agnostic means the team works to DICOM and HL7 conformance statements rather than to one manufacturer's playbook, holds escalation relationships with several vendors, and has no commercial incentive to steer you toward a particular platform. The practical test is to ask a provider to describe an incident they resolved that spanned two vendors' products, and to name what each vendor's support said before the provider proved otherwise.

How many PACS providers should a hospital evaluate before choosing one?

Three to five gives a genuine comparison without exhausting the internal team running the process. Fewer than three and you have no calibration on price or scope. More than five and evaluation quality drops as fatigue sets in. Whatever the number, score every provider against the same written criteria list built before the first conversation, so the process measures fit against your environment rather than presentation polish.

What are red flags when evaluating a PACS support provider?

Reluctance to put SLA numbers into the contract; after-hours coverage described only as ticket acknowledgement; no named engineer for your account; no SOC 2 report or BAA hesitation; an undefined or hostile exit clause; a proposal that never asks about your storage architecture; references they will not let you choose; and a monitoring description that stops at application availability. Individually any one is a question. Two or three together is a pattern.

Can a PACS provider support DICOM gateway and network-level issues, not just software?

The good ones can, and it is a fair filter. Ask how they would diagnose a modality that intermittently fails association only on large CT series. A software-only provider will describe opening a vendor ticket. An infrastructure-capable provider will talk about association logs, transfer syntax negotiation, MTU and fragmentation, firewall behaviour and packet capture. The second answer indicates a team that can resolve the incident rather than route it.

Contracts, pricing and switching

How do you switch PACS providers without imaging downtime?

By overlapping the two rather than cutting over. The incoming provider runs discovery and documents current state while the outgoing contract is still live, deploys monitoring in parallel, takes read-only access first, then progressively assumes incident categories starting with low-risk P3 work. Credentials, runbooks and monitoring configuration transfer before the final date, not on it. A four to eight week overlap is normal, and paying for a few weeks of duplication is far cheaper than a gap in coverage.

What should be in a PACS provider's SLA?

Priority definitions tied to clinical impact rather than technical severity; separate response and resolution targets per priority; explicit coverage windows including holidays; the escalation matrix with names and timeframes; measurement methodology, because an SLA is only as honest as its clock definition; monthly reporting obligations; remedies for missed targets; and exclusions stated plainly. An SLA without a measurement method and a report is marketing.

What's a fair flat-fee pricing model for a PACS provider?

A fair model scopes the fee to environment size, site count, modality classes, integration count and coverage window, then states clearly what falls inside the fee and what is a chargeable project — migrations and major upgrades are usually the latter, and that is reasonable. Flat fee should include monitoring, incident response inside the agreed window, routine administration, vendor case ownership and reporting. Beware fees that look low because incident response above a ticket threshold becomes billable.

How do PACS providers handle after-hours and holiday coverage?

Models vary from a genuine follow-the-sun rota with engineers on shift, through a formal on-call rotation with paged escalation, down to an answering service that logs a ticket for the morning. All three get described as 24/7 in sales material. Distinguish them by asking for the target time from alert to a human engineer engaging out of hours, whether that engineer can make production changes without waiting for daytime approval, and what last quarter's out-of-hours response data actually showed.

Do PACS providers offer both human and veterinary radiology support?

Some do. The underlying engineering is shared — DICOM, storage, networking, archive integrity — but the integration surface differs: veterinary environments integrate with practice information management systems rather than RIS and EHR, carry species and owner metadata, and include a higher proportion of non-DICOM sources from older equipment. RAD365 supports both human and veterinary imaging infrastructure as distinct practice areas with shared engineering discipline.

What questions should you ask a PACS provider's references?

Ask about a specific recent severe incident and who owned it. Ask what the provider does badly. Ask whether SLA reports arrive monthly without chasing. Ask how a migration or major upgrade went, and what went wrong during it. Ask how the provider behaved commercially when scope was ambiguous. Ask whether they would renew. The useful signal is almost always in the answer about what went wrong, because every long relationship has one.

How long does it take to onboard a new PACS provider?

Thirty to sixty days for most single-site and small multi-site environments; sixty to ninety for large or multi-vendor estates. The phases are discovery and documentation, secure access and BAA execution, monitoring deployment, escalation matrix and change-window agreement, a backup and restore verification test, and a written remediation backlog ranked by clinical risk. A provider willing to go live without discovery is guessing at your environment.

What's the difference between interim PACS support and a long-term PACS provider relationship?

Interim support is deliberately time-boxed and outcome-focused: bridging a departing administrator, covering a vendor end-of-life period, or stabilising an environment ahead of a migration decision. A long-term relationship optimises for continuous improvement — reducing recurring incident classes, capacity planning, lifecycle management. Many organisations begin with interim support because it needs less procurement effort, then convert once the environment is stable and the working relationship is proven.

Related resources