A cloud-native DR VNA, built to stand up, verify, and vanish.

Lightbridge is a full DICOM Vendor Neutral Archive assembled from proven, open components — provisioned with Terraform and orchestrated on Kubernetes. It's stood up on demand when you need it, and kept dependable through our quarterly DR exercises — so "fast" never means "untested."

1 · Provision

On demand, Terraform builds the VPC, EKS cluster, encrypted S3, KMS keys, and load balancers — and the Helm chart deploys the archive, identity, mesh, and policy layers, in minutes.

2 · Operate

Modalities store via C-STORE; clinicians query DICOMweb and read in OHIF; the HL7 gateway captures ADT/ORM. Everything is OIDC-gated.

3 · Repatriate & retire

Lightbridge moves studies back to your restored VNA, proves the reconciliation gate, then drives a customer-authorized teardown to zero.

Capabilities

Everything the bridge needs to carry.

A working imaging workflow for the new studies you acquire while your primary is down — not just a place to dump files. Lightbridge is a disaster-recovery bridge, not a permanent VNA replacement: it carries the imaging created during the outage — it has no access to the priors that lived only in your downed archive — and hands it back when your production system returns.

Secure DICOM archive

Accept imaging from your modalities (C-STORE) and serve it back over DICOMweb (QIDO/WADO/STOW) to viewers and downstream systems — all single-sign-on gated.

HL7 ingestion & repatriation

A store-and-forward gateway captures your HL7 feed (ADT/ORM) throughout the outage and replays every message to your restored system on recovery — so orders and patient updates are never lost in the gap.

Modality Worklist (MWL)

Because we process your HL7 orders, Lightbridge can host a Modality Worklist for your modalities — so technologists keep scanning against the right patient and order, with no manual entry. Available if you choose to use it.

Integrated viewer

A web viewer (OHIF) lets clinicians read the studies acquired during the bridge, from anywhere, behind single sign-on — no local install.

Verified repatriation

Every study is pulled, pushed, and read back, with a reconciliation gate that must pass before cutover — optionally down to byte-level content checks.

Zero-trust security

Encryption everywhere, role-based access, and a customer-held destruction key. See the security model

Architecture

Trusted open foundations, plus our own engineering.

We don't reinvent what the world already does well. Lightbridge stands on proven, open-source foundations — a mature DICOM engine, Kubernetes, a managed database — so you benefit from the global communities of professionals who continuously harden and improve them. Where those building blocks leave a gap, we've written our own proprietary software to close it: the automated platform deployment, the verified repatriation, and the cryptographic destruction that make a sub-hour DR VNA actually possible.

DICOM archive engine

proven open-source DICOM engineDICOMweb (QIDO/WADO/STOW)C-STORE · HL7 · MWL

Storage & index

AWS S3 (images)managed PostgreSQL (index)

Identity & access

OIDC single sign-onrole-based access control

Cloud platform

Kubernetes on AWSinfrastructure-as-code

Our proprietary software

automated stand-upverified repatriationcryptographic destruction

◈ Verified repatriation

Proof, not hope.

Lightbridge pulls each study from the source with WADO-RS, stores it to your restored VNA with STOW-RS, then reads it back with QIDO-RS. The reconciliation gate asserts that the source's SOP-Instance-UID set is fully contained in the target — and surfaces any exception by name.

Identity reconciliation by default — every instance accounted for.
Optional --verify-bytes — hash PixelData per instance, full or sampled, for content integrity.
Source storage verification — re-reads stored objects to catch a write that was acknowledged but never durably landed.
Signed report — a manifest + reconciliation gate that countersigns the cutover decision.

Engagement lifecycle

Enroll → Activate → Operate → Repatriate → Decommission.

Enroll

Scope, intake, credentials, compliance model.

Activate

Provision & deploy on demand; endpoints online in minutes.

Operate

Capture & serve imaging and HL7.

Repatriate

Move studies back; pass the gate.

Decommission

Authorized, verified teardown to zero.

Want the engineering deep-dive?

We're happy to walk through the architecture, the security model, and how an engagement maps to your environment.

Request a briefing Review the security model