Inside One Hospital's Search for the Right PACS Provider

A hospital IT director evaluated four PACS providers. What separated the winner wasn't price or brand — it was the answers to five uncomfortable questions.

Inside One Hospital's Search for the Right PACS Provider

Four PACS providers sat in the shortlist folder on a hospital IT director's desk, and on paper they were indistinguishable. Each proposal promised 24/7 coverage. Each listed monitoring, incident response, DICOM administration and vendor escalation. Each carried a monthly figure within about fifteen percent of the others. The director — three sites, two PACS platforms inherited through an acquisition, one archive quietly running out of headroom — had exactly one useful question and no obvious way to answer it: which of these four would actually fix a stalled archive at 3am on a Sunday?

What follows is how that question got answered. The names are withheld; the process is not. It is close to how most managed PACS services evaluations should run and almost never do.

4 → 1

providers shortlisted, decided on five questions

2

PACS platforms running concurrently across three sites

3 wks

discovery that produced the estate's first complete node inventory

The starting position: two platforms, one budget, no documentation

The estate had grown the way most do. The main hospital ran one PACS; a community site acquired two years earlier ran another; a third site fed studies into whichever archive its modalities had been pointed at during installation. Nobody had a current node inventory. The interface map existed as a diagram drawn in a meeting eighteen months earlier and never updated. The single PACS administrator had been on the payroll for nine years and, in the director's own assessment, was the documentation.

The trigger was not a disaster. It was a two-week annual leave during which two modalities stopped routing correctly and the studies were found manually. Nothing was lost. It was simply obvious, for the first time, how thin the layer was.

Question one: who exactly is awake at 3am?

All four proposals said 24/7. The director asked each provider for the shift roster: how many engineers on the overnight shift, awake and on shift or on call from home, how many accounts each covered, what they were authorised to change without waking a manager, and how the roster changed on public holidays.

Two providers answered with a service-desk description. One answered with an on-call rota where the responder covered eleven accounts across three service lines. One answered with a named roster, a stated authority level for P1 conditions, and an offer to introduce the engineers who would hold the account. The shortlist effectively halved in a single email exchange.

Question two: what is explicitly out of scope?

Every provider had listed what was included. The director asked for the exclusions, element by element. This produced the most informative document of the whole process: one provider's cheapest tier excluded interface engine changes, storage expansion planning and any out-of-hours change window — three things this estate needed within the first six months.

Radiology IT support: the boundary that decided it

The most consequential question turned out to be a boundary question. Two of the proposals scoped PACS support narrowly — the application, DICOM routing, worklists and archive — and left everything underneath to the hospital. But the incidents this estate actually suffered were not application incidents. They were imaging VLAN reachability, latency between a community site and the central archive, a firewall rule change that broke a C-STORE association, a diagnostic workstation build inconsistency. Those live in radiology IT support: the network, workstation, identity and virtualisation layer the imaging chain runs on.

Split across two contracts, each of those incidents starts with a jurisdiction argument. The director had lived through enough of them to price the argument realistically. The winning proposal put both layers under one contract, one severity framework and one escalation path — which meant no incident could begin with a debate about whose problem it was. That single structural choice mattered more than any line item in the pricing table.

Question three: can you describe our architecture back to us?

Before the technical session, the director sent each provider the same partial information: vendor names, site counts, approximate study volume, and the fact of the dual-platform estate. In the session, each was asked to describe how they would expect study flow to work and where they would expect it to fail.

Three gave general answers. One walked through the likely AE-title collision risk across two platforms sharing modalities, asked whether the community site's link queued locally during an outage, and asked to see the archive growth rate before commenting on headroom. It was not a sales answer. It was an engineering answer given before any contract existed.

Question four: tell me about a night you failed

Reference calls were structured deliberately around failure. Not "are you happy with them" but "describe your worst incident since onboarding": what happened, how quickly it was detected, who responded, whether the SLA was met, whether the root cause recurred, and whether the monthly report disclosed the miss.

One reference described a missed Severity 1 target that appeared in the monthly report with a root-cause record and a permanent fix attached. That disclosure was worth more than the three flawless accounts described elsewhere. Providers who never miss a target either have very easy clients or a reporting process that does not surface misses.

Question five: what happens when we leave?

The exit clause was requested before price negotiation, deliberately. The director wanted to see who would write clean terms while still competing for the business: data, configuration, documentation and runbooks as hospital property; a hand-over package within a defined window at no extra charge; a 90-day transition period at standard rates. The winning provider sent it back amended in the hospital's favour without being asked twice.

How the four compared

CriterionProvider AProvider BProvider CProvider D (selected)
Overnight engineers namedNoNoOn-call, 11 accountsYes, rostered
Exclusions documentedPartialNoYesYes, element by element
Radiology IT layer in scopeNoNoPartialYes, one contract
Both PACS platforms coveredOne onlyYesYesYes, vendor-agnostic
Reference disclosed a missNoNoNoYes, with root cause
Clean exit clauseNegotiableNoNegotiableYes, first draft

What discovery found

Three weeks of discovery produced the estate's first complete node inventory, an interface map with message specifications, a tested restore of a real study set, and an archive growth projection that put the central store inside twelve months of its ceiling. None of that was a surprise to the incoming engineers; all of it was new to the hospital. The documentation was written into the contract as hospital property from day one.

The consolidation of the two platforms was then planned properly rather than urgently, staged through PACS migration services with dual-feed routing during the overlap and verified batch migration of history — instead of the compressed weekend the previous year's budget cycle had imagined.

The process, in six steps

  1. Inventory first. Even a partial one. Providers cannot quote accurately against a guess, and the gaps tell you where your risk is.
  2. Shortlist on two hard filters. Genuine coverage of your actual vendor mix, and staffed after-hours engineering.
  3. Request exclusions, not inclusions. The exclusions list is the real scope document.
  4. Settle the radiology IT boundary explicitly. One contract across both layers, or a written seam you have agreed to live with.
  5. Structure references around failure. Ask about the worst night, not the launch.
  6. Negotiate the exit clause while you still have leverage. It never gets easier later.

If your own estate is mid-consolidation or short an administrator while you run this process, interim PACS support can hold the line so evaluation is not conducted under pressure.

Get a free PACS assessment

Talk to a RAD365 PACS engineer about coverage, migration, or interim support for your environment. No obligation, no sales pitch.

Get a free PACS assessment →

Choosing PACS providers: frequently asked questions

Managed PACS Support Companies

What is a managed PACS support company and how does it differ from in-house IT support?

A managed PACS support company takes contractual ownership of the imaging estate — monitoring, incident response under SLA, DICOM and interface administration, archive integrity, backup verification, patch and change control, and vendor escalation — as an ongoing service rather than a project. In-house IT support is generalist and usually thin at the imaging layer: one or two people who also carry the rest of the hospital's technology, whose knowledge lives in their heads, and whose coverage disappears on annual leave. The practical difference is depth across vendors, documented rather than remembered knowledge, and cover that does not depend on one person's diary.

Which managed PACS support companies offer 24/7 monitoring and incident response?

Several do on paper; far fewer staff it. The way to tell them apart is to ignore the marketing claim and test the roster: ask how many engineers are on shift at 3am, whether they are awake or on call from home, how many accounts each covers, what they are authorised to change without daytime approval, and how holiday cover differs from a Tuesday. RAD365 runs staffed overnight and weekend shifts with named engineers holding a site runbook and standing authority to act on P1 conditions. Any provider unwilling to describe its roster in that detail is describing intake availability, not incident response.

How do I evaluate managed PACS support companies before signing a contract?

Shortlist three to five on two hard filters — genuine coverage of the PACS, modality and archive stack you actually run, and real after-hours engineer staffing — then go deep on the shortlist. Request the full scope table with exclusions, the SLA with severity definitions and resolution targets, the escalation matrix with names and authority levels, the proposed discovery plan, and the exit clause. Run a technical session between your engineers and theirs about a real past incident, and take two reference calls with hospitals of your size and vendor mix. Compare exclusions before you compare price.

What are the benefits of outsourcing PACS management to a dedicated support company?

Depth across vendors that no single hire can match; documentation that survives resignations; genuine after-hours cover without paying for a night shift you cannot fill; monitoring and problem management that reduce incident volume rather than just responding to it; a predictable flat operating cost instead of emergency call-out spikes; and an internal team freed from firefighting for clinical and strategic work. The benefit that surprises hospitals most is the documentation produced during discovery — most estates have never been fully written down.

What SLAs should a managed PACS support company guarantee for uptime and response time?

Severity levels defined by clinical impact, with both response and resolution targets at each level; minutes-not-hours response on Severity 1 at any hour of any day; same-business-day resolution targets for degraded-but-working conditions; a named escalation path with real people and authority levels; monthly attainment reporting that discloses misses; and a stated consequence when targets are missed. Uptime percentages alone are close to meaningless in imaging — a platform can be nominally up while studies silently fail to route.

Choosing the Best PACS Support Providers

Who are the best PACS support providers for large hospital networks in the US?

The right answer for a large network is rarely the biggest brand; it is the provider that can evidence multi-site engineering across a mixed vendor estate. Look for named engineers per account rather than a rotating pool, a single contract with per-site schedules instead of separate agreements, demonstrated experience running two or more PACS platforms concurrently during consolidation, staffed overnight and holiday shifts, and reference clients with comparable site counts. RAD365 works this way — vendor-agnostic, one severity framework across every site, alongside the network's existing systems and IT team.

What criteria distinguish the best PACS support providers from average vendors?

Five criteria separate them consistently: monitoring that detects incidents before clinical staff do; named engineers who can describe your architecture without asking; SLAs with resolution targets and honest monthly reporting including misses; problem management that produces root-cause records so the same fault does not recur quarterly; and scope written element by element rather than as a general phrase. An average provider will satisfy one or two of these. A weak one satisfies none and compensates with responsiveness during the sales cycle.

How do the best PACS support providers handle system migrations and upgrades?

As a phased, verified program rather than a weekend. Discovery and inventory; target build and DICOM configuration; a test migration of a representative sample with integrity verification; bulk migration in controlled windows while the legacy platform stays live; parallel running with dual-feed routing; reconciliation of study counts and image integrity; then cut-over, with legacy decommissioning only after verification passes. Rollback criteria are agreed before the first window opens. Strong providers also keep interim cover in place through the transition so business-as-usual incidents do not compete with project work.

What certifications should the best PACS support providers hold for healthcare IT compliance?

Expect documented HIPAA compliance with a signed business associate agreement, an information security management framework such as ISO 27001 or an equivalent audited control set, evidence of background-checked personnel, and role-based access with individual named accounts and full audit logging. Beyond certificates, ask for the practical artefacts: the access-control model for your environment, the audit trail you can inspect, the incident-notification process, and the data-handling terms. Certificates prove a program exists; the artefacts prove it applies to your account.

How can I compare the best PACS support providers based on customer reviews and service quality?

Public reviews are thin in this market, so substitute structured references. Ask each provider for two clients matching your size and vendor mix, and ask those clients about a failure rather than a launch: what happened, how quickly it was detected, who responded, whether the SLA was met, whether the root cause recurred, and whether the monthly report disclosed the miss. Also ask about renewals and about what the provider is poor at. One detailed conversation about a bad night predicts service quality better than any published score.

Radiology IT Support & Vendor Coverage (reasoned/derived)

What does radiology IT support cover that PACS support alone does not?

Radiology IT support owns the layer the imaging chain runs on: the imaging VLAN and its segmentation, switching and firewall rules, bandwidth and latency between modalities and the archive, VPN and site-to-site links, diagnostic workstation builds and display calibration workflows, dictation and reporting endpoints, identity and access services, and the virtualisation or server platform underneath. PACS support owns DICOM nodes and routing, worklists, interfaces, archive tiering, hanging protocols and user administration. Most real incidents involve both layers, which is why a single accountable contract outperforms two.

Do PACS providers support GE, Sectra, Intelerad, Philips and Fujifilm equally?

A vendor-agnostic provider should, and should say so with specifics: which versions it runs today, which archive models, which interface engines, and which end-of-life platforms it still maintains. Most hospital estates carry two or three platforms simultaneously because of acquisitions and departmental purchases, so single-vendor specialization becomes a limitation rather than a strength. Ask for a named engineer with hands-on experience of your primary platform, and for a reference client running the same mix.

How do PACS providers support a hospital through a platform consolidation?

By running both estates properly while the consolidation proceeds. That means keeping the legacy platform monitored, patched and restorable rather than treating it as already dead, standing up the target platform in parallel, dual-feeding new studies during the overlap, and migrating history in verified batches. Consolidations fail most often not at the technical migration but in the overlap period, when nobody is clearly accountable for the platform that is on its way out.

When does a hospital need a dedicated DICOM gateway alongside its PACS provider?

When study flow crosses boundaries the PACS was not designed to manage: multiple sites feeding one archive, non-conformant modality metadata requiring tag normalisation, external referrers or partner organizations sending studies in, a dual-feed period during migration, or routing rules complex enough that a modality service visit can silently break them. A gateway centralises that logic where it can be monitored and changed safely, instead of scattering it across device configurations nobody has documented.

Transition, Cost & Internal Ownership (reasoned/derived)

What happens to the in-house radiology IT team when a managed provider comes in?

The role changes rather than disappears. Someone internal must still hold clinical context, approve change requests, arbitrate hanging-protocol and workflow decisions with radiologists, and act as the escalation counterpart. What the managed provider absorbs is the after-hours burden, the vendor-by-vendor engineering depth, and the single-point-of-failure risk when one administrator holds the whole environment in their head. Teams that resist the change usually accept it after the first quarter, when the pager stops.

How long should a hospital expect the evaluation and transition to take end to end?

Plan on three to six months from first RFP to formal SLA commencement for a multi-site network, and six to ten weeks for a single site. Evaluation is four to eight weeks if reference calls and a technical session are included. Discovery and inventory run two to four weeks and produce the documentation set you keep whatever happens next. Monitoring deployment, runbook authoring, escalation agreement and a shadow period covering at least one full weekend follow. Compressing discovery is the most reliable way to produce a disappointing first quarter.

Related resources