Nineteen products, two platform tools.

DICOM routing platform.

Ingest from any modality, route by rules, transform tags, anonymize, prefetch, hold-and-release. The flagship workflow orchestrator — both the operating-control plane for an imaging department and the integration hub between modality, EMR, PACS, VNA, and reporting.

Streaming DICOM router — entry / OEM tier.

The leanest member of the Router family: real-time DICOM streaming — receive, match priority routing rules, and multiplex-fan-out to destinations, with no store-and-forward. Lowest latency, smallest footprint — built to embed as an OEM routing layer, or to front a department that needs pure, fast C-STORE routing and nothing else.

Store-and-forward DICOM router.

The mid-tier of the Router family: a full store-and-forward DICOM router (DICOM-only). Each received instance is sealed to a durable encrypted spool, matched against priority routing rules, and forwarded to DIMSE or DICOMweb destinations with restart-surviving retry and dead-letter — plus per-destination transcode, de-identification, load-failover, a manual hold queue, and a PHI-free analytics window.

Modality Worklist from HL7 orders.

The Modality Worklist member of the Router family. An HL7 v2 MLLP listener ingests orders (ORM / SIU / ADT) into an encrypted order store, and a DICOM Modality Worklist (MWL) C-FIND SCP serves those orders back to imaging devices as a worklist. Order-in to worklist-out — the HL7/MWL slice, extracted from the flagship so the routers stay pure-DICOM.

Structured-report ingest + forwarding.

A standalone licensed subset of the Router focused on SR (Structured Report) DICOM objects. Ingests SR from modalities, applies tag transformations, forwards to PACS/VNA + reporting platforms.

Whole-slide imaging ingest sidecar.

WSI conversion sidecar for the archive family. Watches an intake folder, converts native pathology formats (SVS, NDPI, MRXS) to DICOM Supplement 145 WSI, and forwards via STOW-RS to your VNA. The only Windows-only product in the family (OpenSlideNET dependency).

POCUS-style encounter workflow.

Encounter-driven imaging workflow with mandatory human verification gate. Receives DICOM, matches against an HL7 ADT feed, blocks on human verification, then forwards enriched studies to PACS/VNA. Closes the encounter loop with HL7 ORM^O01 / FHIR ServiceRequest back to the EMR.

Vendor-neutral DICOM load balancer.

Drop-in replacement for F5, NetScaler, or HAProxy in front of any PACS or DICOM Router pool. Routes by Study Instance UID, not TCP 5-tuple — keeps every clinical study together on one backend across associations, follow-up imaging days later, and SynthIQ restarts. Works with any DICOM-conformant backend (Synthology fleet, vendor PACS, research VNAs, cloud-native endpoints).

Cross-site DICOM result relay.

Bridges AI-vendor result delivery into firewall-isolated on-prem Router fleets. The AI vendor C-STOREs results to a SynthCloudConnect endpoint; the on-prem Router pulls them down over an existing outbound-initiated mTLS WebSocket. No inbound firewall holes; no Synthology-to-customer initiated traffic. Generally available — self-hosted or hosted multi-tenant.

One console for the whole fleet.

A single pane of glass for your application fleet. See every application's health, queues, and config-sync posture at a glance — then open any application's own console right from the board, with single sign-on, so you view and run your applications from one location instead of logging into each. SynthConstellation also runs the customer-controlled config-backup hub, which any enrolled XyDromatics product can use: each seals its configuration to the console automatically, on a schedule, so a lost or replaced host reseeds its exact configuration from the hub. It moves no images and has no clinical function, but its fleet queues surface the patient identifiers your products report — so it is PHI-bearing, a HIPAA Business Associate under your BAA. Non-device software.

Monitoring for the products we didn't build.

Black-box liveness monitoring for the third-party and other-vendor systems running alongside your Synthology fleet. SynthGateway watches every Synthology and XyDromatics product from the inside; SynthPulse extends that to a foreign PACS, an HL7 interface, a database, or a DICOM listener — probing from the outside for reachability, TLS certificate expiry, and a real DICOM C-ECHO, and reporting to the same gateway so the whole environment lands in one view. Its own admin console shows what is monitored, what is down right now and a week of history, and lets you add, edit and test targets without a restart. A Windows service or Linux systemd daemon, one site licence, PHI-free by design. General-purpose business software; not a medical device.

Standalone migration appliance.

A standalone migration appliance distinct from XyDromatics Migration. DICOM-only bulk study migration — Q/R pull from a source PACS, C-STORE push to the target. Suited for short-lived migration projects where deploying the full XyDromatics Migration product is overkill.

Raw PHI in, research-safe data out.

The one-way de-identification appliance. Accepts studies and reports across an untrusted network over mutually-authenticated encrypted channels (DICOM-TLS C-STORE, MLLP-over-TLS, DICOMweb STOW-RS), applies HIPAA Expert-Determination de-identification — keyed pseudonymization, interval-preserving date shift, free-text and burned-in-pixel scrubbing — and forwards de-identified output plus PHI-free coded concepts to XyDromatics Research. Runs Synthology-hosted (cloud) or customer-operated (on-prem). Output is Research-Use-Only.

One directory for the whole shop.

A standalone, standards-compliant LDAPv3 directory. Create every user account once, and every application in the building authenticates against it instead of keeping its own separate logins. Built for smaller facilities that never stood up a corporate directory: a single self-contained server (SQLite by default, PostgreSQL for a replicated pair), an admin console as the primary way to manage people and groups, and manager-DN binds for scripted provisioning. Because it speaks standard LDAP, any LDAP-aware application can point at it — the Synthology fleet included, by configuration alone.

Every connected DICOM device, catalogued.

An always-current inventory of every DICOM device on your imaging network. Deployed as a metadata-only DICOM destination behind any vendor's router, it reads each device's network identity (Calling AE, host / IP / port, negotiated SOP class + transfer syntax) and equipment identity from image headers (manufacturer, model, serial number, software version, station, institution), then discards the object. Optional C-ECHO reachability checks confirm which devices are live. Pixel data and patient identifiers are dropped on receipt — the registry keeps device metadata only, no PHI at rest.

Historical + cross-router fleet analytics.

A standalone analytics surface over the operational history your Synthology products archive. Each product writes a compact, gzipped-NDJSON event archive off its hot database; SynthInSight reads that archive with an embedded columnar (DuckDB) query engine and answers all-time and cross-router questions the live operational dashboards can't — without ever touching the ingest path. Aggregate-only by design: counts, distinct-counts, and daily series — never row-level PHI. Deploys independently of every other product.

Legacy-PACS retirement, end to end.

Three applications packaged as one legacy-PACS retirement workflow: Migration Engine fronts the legacy PACS and queries each study once (offloading the live production archive), XyDromatics Migration de-duplicates + remediates tags + quality-gates every study before it reaches the net-new PACS, and both engines report PHI-free counts to SynthInSight for one unified Migration Analytics view. PHI stays on the on-prem image path; only counts reach SynthInSight. The members ship and are licensed independently — the suite is a commercial bundle, not a fused binary.