İçeriğe geç
Tres Teknoloji
Solutions / Healthcare

Patient data in Turkey, access open at all times

Highly available, KVKK-compliant infrastructure for hospital information systems, imaging archives and appointment platforms.

Requirements met
KVKK — special category data Additional security measures and encryption for health data.
Ministry of Health legislation Data residency and retention periods.
ISO 27001 Access control and audit trail requirements.
Business continuity Patient care cannot stop: a secondary region and automatic failover.
99.95% HBYS availability target
RTO 15 min Recovery time
Encrypted Data at rest and in transit
24/7 Monitoring and support
Challenges

When the hospital system stops, there is no alternative

When the HBYS goes down for an hour, outpatient flow, laboratory results and prescription processes lock up. In healthcare institutions, recovery time is not a line item of cost but a matter of patient safety.

Active-passive second region

A synchronous replica in the İzmir region; automatic takeover if the primary region is lost.

Image archive (PACS)

Scalable object storage for growing imaging data.

Special category data protection

Encryption with your own KMS key, multi-factor authentication on access.

Planned maintenance window

Maintenance is done outside outpatient hours, with advance notice.

Recommended architecture

An architecture that separates the hospital information system and the imaging archive, replicated to a second region.

Access
Site-to-site VPN Client VPN Load balancer NetWaf
HBYS
Virtual server (HA) Managed database Private VPC
Imaging
Object storage (PACS) Lifecycle archive
Continuity
DRaaS (tr-izm-1) Backup Logchase KMS
Customer reviews

What healthcare institutions say

“After moving the HBYS to two regions, patients noticed nothing during a hardware failure.”
CA Ceren Aksoy Information Systems Officer · A private hospital chain
“Moving the PACS archive to object storage ended both the space problem and lowered storage cost.”
OY Okan Yalçın IT Manager · An imaging center
“Being able to encrypt special category data with our own key was very useful in the KVKK audit.”
ZK Zeynep Kara Quality and Information Security Officer · A healthcare group
S.S.S.

Frequently asked questions about healthcare cloud infrastructure

With the additional measures KVKK requires for special category data: encryption at rest and in transit, your own KMS key, multi-factor authentication on access and a detailed audit trail are applied.

An active-passive second region (e.g. tr-izm-1) holds a synchronous replica; if the primary region is lost, automatic takeover keeps the HBYS up. The targeted availability is 99.95%.

Imaging data is kept in scalable object storage; with lifecycle rules, older studies are moved to a cheaper tier, lowering disk cost.

Yes. Both the primary and secondary regions are in data centers within Turkey; this is aligned with Ministry of Health legislation and KVKK’s data residency expectation.

Planned maintenance is done outside outpatient hours in windows announced in advance; for critical patches, failover to the second region is used to prevent downtime.

With auto-scaling, the appointment and web platforms grow during busy hours and return to a fixed cost during quiet hours; sudden demand spikes are handled smoothly.

With DRaaS the recovery time target (RTO) is about 15 minutes, and with continuous replication data loss is minimized; the recovery scenario is tested periodically.

With role-based access, multi-factor authentication and all access being recorded in Logchase, who accessed what is traceable and auditable.

A case from this sector A private hospital chain moved its HBYS to two regions

The information system of the six-branch chain moved from a single server to a dual-region high-availability architecture. The imaging archive was moved to object storage, lowering disk cost.

99.96% Measured availability
18 TB Images moved to the archive
31% Storage cost reduction

Talk to a team that knows your sector

A solution architect who has run projects in that sector joins the meeting. In the first meeting we produce an architecture draft and a cost range.

Schedule a meeting