A description (tagline) is not available for this product.
Single-tenant AWS servers with your BAA signed. Self-managed or fully managed — your call.
A compliant server. Yours to administer.
Your own isolated AWS account and VPC — never shared, never multi-tenant — with a signed Business Associate Agreement and the compliance baseline already in place.
Configured before you get the keys
Encrypted storage and TLS · audit logging · daily snapshots with 7-day retention · uptime monitoring with email alerts.
Where our responsibility ends
We provide and secure the infrastructure. You administer the server — OS updates, web server, PHP and database tuning — and WordPress core, plugins, themes and content remain yours. If you would rather we ran the server for you, that is our Solo plan.
Specification
2 vCPU · 2 GB RAM · 20 GB storage · 100 GB monthly transfer.
Not sure which you need?
Self-Managed suits practices with a developer or IT provider already in place. Everyone else should start with Solo.
A compliant server, administered by us.
Your own isolated AWS account and VPC — never shared, never multi-tenant — with a signed Business Associate Agreement and the compliance baseline in place from day one.
We run the server
OS patching and updates · security hardening, firewall and TLS renewal · web server, PHP and database tuning · daily snapshots with verified restores · database-consistent backups · server monitoring and incident response.
We watch the application layer too
Plugin and theme vulnerability alerts · malware scanning · file integrity monitoring · server-level page cache and Redis object cache. We tell you what we find — you decide what to do about it.
Where our responsibility ends
WordPress core, plugins, themes and content remain yours. If a problem sits at the server or infrastructure layer we take it. If it is in your application, we hand it back with a clear diagnosis and recommended options.
Specification
2 vCPU · 8 GB RAM · 16 GB storage · 100 GB monthly transfer.
Who it is for
Single-practitioner practices that want a compliant WordPress site without administering a server themselves.
Everything in Solo, with room to grow.
Your own isolated AWS account and VPC — never shared, never multi-tenant — with a signed Business Associate Agreement and the compliance baseline in place from day one.
We run the server
OS patching and updates · security hardening, firewall and TLS renewal · web server, PHP and database tuning · daily snapshots with verified restores · database-consistent backups · server monitoring and incident response.
We watch the application layer too
Plugin and theme vulnerability alerts · malware scanning · file integrity monitoring · server-level page cache and Redis object cache. We tell you what we find — you decide what to do about it.
Added at this tier
Web application firewall · CDN for faster delivery to patients wherever they are · a staging environment so plugin and theme changes can be tested before they touch your live site.
Where our responsibility ends
WordPress core, plugins, themes and content remain yours. If a problem sits at the server or infrastructure layer we take it. If it is in your application, we hand it back with a clear diagnosis and recommended options.
Specification
4 vCPU · 16 GB RAM · 32 GB storage · 100 GB monthly transfer.
Who it is for
Practices with up to five providers, or any single-provider practice whose site has outgrown a starter plan.
Everything in Practice, with eyes on it around the clock.
Your own isolated AWS account and VPC — never shared, never multi-tenant — with a signed Business Associate Agreement and the compliance baseline in place from day one.
We run the server
OS patching and updates · security hardening, firewall and TLS renewal · web server, PHP and database tuning · daily snapshots with verified restores · database-consistent backups · server monitoring and incident response.
We watch the application layer too
Plugin and theme vulnerability alerts · malware scanning · file integrity monitoring · server-level page cache and Redis object cache · web application firewall · CDN · staging environment.
Added at this tier
Proactive Log Review — we review your server's logs and active findings continuously. When a recurring issue surfaces, our team performs a full root-cause analysis and delivers it with recommended resolution options in a support ticket, so problems are fixed at the source instead of repeatedly patched. Sold separately at $200/month.
Priority alerting — 24/7 SMS and email alerts for downtime, server health and security events, delivered to your team the moment they happen.
Where our responsibility ends
WordPress core, plugins, themes and content remain yours. If a problem sits at the server or infrastructure layer we take it. If it is in your application, we hand it back with a clear diagnosis and recommended options.
Specification
8 vCPU · 32 GB RAM · 64 GB storage · 100 GB monthly transfer.
Who it is for
Multi-provider clinics where downtime has a measurable cost, and practices that need documented evidence of ongoing system activity review.
Our largest standard plan.
Your own isolated AWS account and VPC — never shared, never multi-tenant — with a signed Business Associate Agreement and the compliance baseline in place from day one.
We run the server
OS patching and updates · security hardening, firewall and TLS renewal · web server, PHP and database tuning · daily snapshots with verified restores · database-consistent backups · server monitoring and incident response.
We watch the application layer too
Plugin and theme vulnerability alerts · malware scanning · file integrity monitoring · server-level page cache and Redis object cache · web application firewall · CDN · staging environment · proactive log review with documented root-cause analysis · 24/7 SMS and email alerting.
Added at this tier
Quarterly compliance evidence pack — a documented record of encryption, access controls, audit logging, backup verification and system activity review for the quarter, assembled and delivered so you have it ready for audits, security questionnaires and payer reviews rather than assembling it under deadline.
Where our responsibility ends
WordPress core, plugins, themes and content remain yours. If a problem sits at the server or infrastructure layer we take it. If it is in your application, we hand it back with a clear diagnosis and recommended options.
Specification
16 vCPU · 64 GB RAM · 128 GB storage · 100 GB monthly transfer.
Who it is for
Multi-location groups, and any practice that fields security questionnaires or audit requests often enough that having the evidence already assembled is worth paying for.
Designed around your requirements, not ours.
Enterprise environments start at 32 vCPU and scale from there. Because they are architected per client, the specification below is a starting point rather than a fixed plan. Talk to us before ordering and we will scope it properly.
Everything in Group, plus
Multi-server and load-balanced architectures · high availability and multi-AZ database options · dedicated RDS instances · custom network topology and private connectivity · negotiated SLAs and response times · named technical contact · hour bank for scoped project work.
Compliance
Signed BAA, quarterly compliance evidence packs, and support for your own audit, penetration-testing and security-questionnaire cycles. We can work directly with your compliance officer or external auditor.
Where our responsibility ends
The boundary is the same at every tier. We are responsible for the servers and infrastructure, and the application layer remains yours. For Enterprise clients we will scope application-layer work separately if you want us involved in it. It simply is not bundled by default.
Starting specification
32 vCPU · 128 GB RAM · 256 GB storage. Scaled to requirement.
Who it is for
Health systems, hospital groups, and organisations with architecture, availability or contractual requirements that a standard plan cannot express.
