XyDromatics Migration Engine Specialized engine · Universal pre-processor

XyDromatics™ Migration Engine — vendor-agnostic by design.

The right-sized migration appliance — and the universal pre-processor for any migration project. Use it standalone for small / medium migrations, in front of VNA Migration for large engagements, or as a normalization + tag-coercion layer in front of third-party migration tools (DataFirst, Laurel Bridge, DicomSys, or a customer’s incumbent platform). Migration Engine doesn’t care who’s doing the actual migration delivery.

Same family-platform features as the rest of the router- pattern hosts — keyed-hash pseudonymization, built-in honest-broker capability, shared site encryption key when deployed alongside other Synthology products.

Capabilities

Cheap, parallelizable edge work — for any migration target.

Migration Engine focuses on the syntactic cleanup that makes downstream verification, transformation, and audit faster — regardless of who’s doing the downstream work.

Multi-source ingestion

Read from any DICOM-conformant source, plus filesystem and HL7-driven inputs. Same source-system breadth as VNA Migration in a smaller footprint.

  • C-STORE SCU (push from source) + SCP (pull-style ingest)
  • Q/R against the source archive (C-FIND + C-MOVE / C-GET)
  • STOW-RS for modern HTTP-based source systems
  • HL7 / MWL-driven ingest (orders + worklist trigger pulls)
  • File-watcher ingest for offline / disconnected sources
  • Bulk DICOMDIR + filesystem-walk for raw exports

Normalization at the edge

The cheap, parallelizable cleanup work that makes downstream verification + audit faster. Run multiple Migration Engine workers; let downstream tools focus on their actual jobs.

  • Character-set normalization (legacy non-UTF-8 sources)
  • Malformed-header repair (legacy systems wrote non-spec data)
  • Deprecated VR (Value Representation) coercion
  • Non-spec timestamp formatting normalized to spec-compliant
  • SOP Instance UID validation + remediation where possible
  • Per-source-vendor profile handling (vendor X always emits this quirk)

Tag coercion

Force common tag values into the formats downstream systems expect — without changing the value semantics. Distinct from VNA Migration's audit-heavy tag transformation.

  • Accession-number padding / formatting per institutional standard
  • Date-string format normalization (YYYYMMDD vs ISO-8601)
  • AE-Title remapping (legacy modality AE-Titles -> current naming convention)
  • Patient-name format coercion (e.g., FAMILY^GIVEN canonicalization)
  • Study Description / BodyPartExamined normalization to RadLex / institutional codes
  • Configurable coercion rules per source / per modality

Resilient forwarding + operator pacing

A standalone migration appliance has to manage its own pacing. Operator-controlled start/pause, retry policies, and dead-letter handling.

  • Operator-controlled migration windows — manual start with live pause/resume, so large moves run off-peak
  • Per-destination bandwidth caps + priority queues
  • Exponential-backoff retry with configurable policy
  • Dead-letter queue for persistently-failing sends
  • Pause / resume with state checkpointing
  • Concurrent worker support for parallel sends

Universal pre-processor (vendor-agnostic)

Migration Engine doesn't care who's doing the actual migration delivery. Normalize and coerce upstream of any target platform — Synthology or third-party.

  • Front-end for XyDromatics VNA Migration (packaged pattern for large engagements)
  • Front-end for DataFirst engagements (via IES-Advisors)
  • Front-end for Laurel Bridge migration tools (Compass, Navigator)
  • Front-end for DicomSys migration tools (UVR)
  • Front-end for customer's existing migration platform (any DICOM-conformant target)
  • Standalone — no downstream migration platform required when Migration Engine handles the full move

Family-platform features

Same platform features as the rest of the router-pattern family.

  • Keyed-hash pseudonymization with shared site encryption key (anon-IDs consistent across the customer's product portfolio)
  • Built-in honest-broker capability for studies anonymized by Migration Engine
  • AI-vendor PHI-shielded round-trip workflow
  • Web administration UI with shared sidebar shell
  • Role-based access control with full permission catalog
  • Hash-chain audit log for migrated studies
  • 21 CFR Part 11-aligned audit trail

Architecture

Source · Migration Engine · any downstream target.

The architectural shape is deliberately flexible — Migration Engine sits between source and target, and the target can be any migration platform (Synthology, third-party, customer- incumbent) or a final archive directly.

XyDromatics Migration Engine architecture Migration Engine reads from a source archive, performs normalization and tag coercion at the edge, and forwards cleaned data to any downstream target — Synthology VNA Migration / Repository / Clinical / SR Engine, third-party migration tools (DataFirst, Laurel Bridge, DicomSys), or a final archive directly. Multiple Migration Engine workers scale horizontally for large migrations. SOURCE MIGRATION ENGINE scales horizontally ANY DOWNSTREAM TARGET Source archive Legacy PACS / VNA Filesystem export Q/R · C-STORE · STOW-RS · HL7/MWL Migration Engine Non-device software Worker 1 Normalization Tag coercion Worker 2 Normalization Tag coercion + Worker N (parallel scale) Keyed-hash pseudonymization · Honest-broker capability shared site encryption key with Router / VNA / SR Engine Synthology VNA Migration packaged front-end Synthology VNA / Router / SR direct write DataFirst (via IES) third-party front-end Laurel Bridge / DicomSys third-party front-end ...or any DICOM-conformant target Vendor-agnostic by design Migration Engine doesn't care who's doing the actual migration delivery — it cleans the input

Deployment patterns

Six deployment shapes.

Customers use Migration Engine in multiple complementary patterns. Standalone for small projects, front-end for VNA Migration on large engagements, front-end for third-party tools where the customer has an incumbent platform, modality- side cleanup as a permanent fix.

Pattern 1

Standalone small / medium migration

A bounded migration project — single source PACS, one or two target archives, weeks-to-months runway. Migration Engine handles the full move: read source, normalize, coerce, send to target. No need for the multi-petabyte VNA Migration heavyweight.

Flow

  1. 1 Source: legacy PACS via Q/R or filesystem export
  2. 2 Migration Engine ingests with normalization + coercion at the edge
  3. 3 Per-source / per-modality cleanup rules applied
  4. 4 Studies forwarded to target archive (any DICOM-conformant)
  5. 5 Hash-chain audit log + completion report at engagement end
Pattern 2

Front-end for XyDromatics VNA Migration

Large multi-petabyte migrations benefit from horizontal pre-processing. Multiple Migration Engine workers normalize + coerce in parallel; clean data flows into VNA Migration which focuses on per-study verification, full tag transformation, and hash-chain audit.

Flow

  1. 1 Multiple Migration Engine workers deployed in parallel
  2. 2 Each worker reads a partition of the source archive
  3. 3 Normalization + coercion happens at the edge (cheap, parallel)
  4. 4 Clean data flows to VNA Migration for verification + audit + transformation
  5. 5 VNA Migration writes to the final target with full audit trail
  6. 6 Net effect: meaningfully higher overall throughput vs VNA Migration alone
Pattern 3

Front-end for DataFirst (via IES-Advisors)

IES-Advisors engagements using DataFirst as the migration platform can layer Migration Engine in front to handle the syntactic cleanup that DataFirst doesn't natively do — character sets, malformed headers, deprecated VRs. Migration Engine cleans; DataFirst delivers.

Flow

  1. 1 IES-Advisors scoped engagement using DataFirst as the migration platform
  2. 2 Migration Engine deployed as front-end pre-processor
  3. 3 Source data flows through Migration Engine first
  4. 4 Normalized, tag-coerced data flows into DataFirst
  5. 5 DataFirst handles deduplication and cross-vendor consolidation against clean input
  6. 6 Customer benefits from improved throughput without changing the DataFirst engagement shape
Pattern 4

Front-end for Laurel Bridge / DicomSys / third-party migration tools

Customer has an existing migration tool (Laurel Bridge Compass, DicomSys UVR, or another vendor's platform) and wants to add Migration Engine as a normalization + coercion layer to improve migration throughput and reduce retry / quarantine volume on their existing tool.

Flow

  1. 1 Existing migration tool already deployed at customer site
  2. 2 Migration Engine inserted upstream as the pre-processor
  3. 3 Source data normalized and coerced before reaching the existing tool
  4. 4 Existing tool sees cleaner data, fewer retries, less quarantine queue volume
  5. 5 Customer keeps their incumbent migration platform investment
  6. 6 Migration Engine licensable standalone — no other Synthology products required
Pattern 5

Modality-side cleanup pre-PACS

A single modality (or a small group) emits chronically malformed DICOM that downstream PACS struggles with. Migration Engine sits in front of the PACS as a permanent cleanup layer — turning bad-data emission into an architecture problem rather than a daily ops headache.

Flow

  1. 1 Modality emits DICOM with vendor-specific quirks
  2. 2 Migration Engine ingests, normalizes, coerces
  3. 3 Clean DICOM forwarded to PACS / VNA
  4. 4 PACS receives reliable data; ops team stops fielding daily "this study won't open" tickets
  5. 5 Vendor-specific quirk profile maintained by Migration Engine, not by every downstream system
Pattern 6

AI-vendor integration without sharing PHI

Same family-wide round-trip pattern as the Router and the VNA siblings. Migration Engine de-identifies via keyed-hash on the way out, AI vendor analyzes anonymized data, findings come back, Migration Engine re-identifies and routes findings to the correct downstream destination.

Flow

  1. 1 Source study qualifies for AI analysis
  2. 2 Migration Engine de-identifies via keyed-hash pseudonymization
  3. 3 De-identified study sent to AI vendor (vendor sees only anon-ID)
  4. 4 AI vendor returns findings tagged with the anon-ID
  5. 5 Migration Engine re-identifies via the retained mapping
  6. 6 Findings forwarded to PACS / EMR linked to the correct patient

Integration points

Sources, Synthology targets, third-party targets.

Migration Engine’s third-party-target list is what makes it vendor-agnostic. Customers running an incumbent migration platform don’t have to choose between replacing it and skipping the cleanup benefits — Migration Engine slots in upstream of any DICOM-conformant target.

Source systems (read from)

  • Any DICOM-conformant SCP via Q/R
  • Legacy PACS / VNA across all major vendors
  • Filesystem exports (DICOMDIR, raw tree)
  • HL7 / MWL-driven ingest for order-and-worklist-correlated migrations
  • See /products/vna-migration#integrations for the multi-specialty vendor lineage

Downstream targets (Synthology)

  • XyDromatics VNA Migration (front-end pattern, packaged deployment)
  • XyDromatics VNA Repository (retention-tier writes)
  • XyDromatics VNA Clinical / Clinical Research
  • XyDromatics Router (routing layer downstream of cleanup)
  • XyDromatics SR Engine (for SR-specific migrations)

Downstream targets (third-party)

  • DataFirst migration platform (via IES-Advisors)
  • Laurel Bridge Compass / Navigator
  • DicomSys UVR
  • Customer's existing migration platform (any DICOM-conformant)
  • Direct STOW-RS endpoints for cloud archives

Cross-product orchestration

  • Shared site encryption key (consistent anon-IDs across the customer's portfolio)
  • Shared admin shell (consistent operational surface across products)
  • Shared audit-trail format (cross-product audit aggregation)
  • SynthQMS integration for migration-plan change control

Identity, audit, observability

  • OIDC / SAML for the web admin UI
  • Active Directory / Azure AD federation
  • Per-AE-Title audit trail entries
  • Hash-chain audit log
  • Prometheus metrics + structured JSON logs
  • Webhook outputs for SIEM integration

System requirements & sizing

Sized to throughput, scales horizontally.

Migration Engine workers scale linearly until source-side throttling becomes the bottleneck. Add workers; throughput adds. Sizing is per-worker.

Tier Workload CPU RAM Notes
Worker (single) 1 – 5 TB / day throughput 4 vCPU 8 GB Standalone single-site migration. Modality-side cleanup. Single front-end worker for medium VNA Migration engagements.
Worker pair (2 workers) 5 – 15 TB / day aggregate 4 vCPU per worker 8 GB per worker Larger standalone migrations, or 2-worker front-end for VNA Migration / third-party tools.
Worker cluster (4+ workers) 15+ TB / day aggregate 8 vCPU per worker 16 GB per worker Multi-petabyte migrations as VNA Migration front-end, or large-scale standalone consolidation.

Licensing

Three packages, project-scoped or perpetual.

Migration Engine licensing fits both project shapes: short-engagement migrations (project-scoped) and ongoing modality-cleanup deployments (perpetual). Tier choice depends on the breadth of coercion needs and whether AI-vendor PHI shielding is required.

Migration Engine Core

The base appliance — multi-source ingest, normalization, basic forwarding. Suited for standalone small / medium migrations.

  • C-STORE / Q/R / STOW-RS source + target
  • Character-set + malformed-header normalization
  • Standard tag coercion rules
  • Resilient forwarding with retry
  • Web admin UI + RBAC
  • Up to 50 TB total migrated

Migration Engine + Coercion

Adds full per-source coercion profiles, vendor-quirk handling, and HL7 / MWL-driven ingest.

  • Everything in Core
  • Per-source-vendor profile catalog
  • Custom coercion rules per source / per modality
  • HL7 / MWL-driven ingest
  • RadLex / institutional-code normalization
  • Up to 250 TB total migrated

Migration Engine Enterprise

Everything, plus parallel worker deployment, AI-vendor PHI shielding, and family-platform features.

  • Everything in Core + Coercion
  • Multi-worker parallel deployment (front-end pattern)
  • Keyed-hash pseudonymization for AI-vendor PHI shielding
  • Built-in honest-broker capability for re-identification
  • Hash-chain audit log
  • Cross-product site-key sharing (with Router / VNA family / SR Engine)
  • Unlimited migration capacity
  • Premium support tier eligible

Project-scoped licensing for short-engagement migrations; perpetual licensing for ongoing modality-cleanup deployments. Multi-product bundles (Migration Engine + VNA Migration, or Migration Engine + Router + VNA family) get bundle pricing and shared site-key provisioning.

Documentation

The controlled-document set.

Current GA release v1.0.3.179 · released 2026-08-06

Every Migration Engine deployment ships with the documents below, all managed under SynthQMS document control. The DICOM Conformance Statement is publicly available; the rest are shared under mutual NDA.

What’s new·v1.0.3.179

Scheduled Migration — keep a source and target continuously in sync

  • New Scheduled Migration — set a cron schedule and the engine automatically re-discovers new studies at the source and enqueues them for migration, so an ongoing migration stays current without manual re-runs.
  • Previously-failed or partial transfers are retried on each scheduled cycle, so a transient target outage recovers on the next run.
  • Schedule filters are non-PHI (modality and date window), and studies already migrated are never re-copied.
  • More reliable project completion — a concurrent resume can no longer strand queued work in a project that is finalizing.
  • Ships with the approved End-User License Agreement and clears a full QA + security-test pass on the release build.
Document Title Notes
DOC-2026-103 Hardware & Software Requirements (Migration Engine) Sizing, OS support, dependencies
DOC-2026-099 DICOM Conformance Statement (Migration Engine) Public — full SOP class + transfer-syntax matrix
DOC-2026-106 EULA Annex (Migration Engine) Annex to the Synthology Master EULA (DOC-2026-063)
DOC-2026-098 Penetration Test Results (Migration Engine) Available under NDA
DOC-2026-108 QA Runner Manual (Migration Engine) Internal QA + customer-validated test runs
DOC-2026-105 User Guide (Migration Engine) Operator + administrator workflows
DOC-2026-104 Installation Guide (Migration Engine) Includes MSI deploy + Linux tarball + multi-worker pattern

Additional documents

Migration Engine-specific documents beyond the standard set. Items marked Pending are tracked for authoring under SynthQMS change control.

Document Title Notes
DOC-2026-400 Vendor-Quirk Profile Catalog (Migration Engine) Per-vendor known-quirk profiles maintained as living documentation

Frequently asked

The questions prospects ask.

How is Migration Engine different from VNA Migration?

Different scale and different shape -- but they're often deployed together. Migration Engine is the smaller-footprint appliance: standalone for small / medium migrations, or as a horizontal pre-processor in front of VNA Migration on large engagements. VNA Migration is the multi-petabyte workhorse with full HA, parallel worker nodes, multi-month migration plans, full per-study verification, transformation, and hash-chain audit. Same family, complementary roles.

Does Migration Engine require VNA Migration or any other Synthology product?

No. Migration Engine is fully standalone-licensable. Many customers buy it on its own for small / medium migration projects, modality-side cleanup, or as a pre-processor for their existing third-party migration platform (DataFirst, Laurel Bridge, DicomSys, etc.). No other Synthology product required. If the customer later adds Router / VNA family / SR Engine, the products inherit the same site encryption key for cross-product anon-ID consistency.

Can Migration Engine work with non-Synthology migration platforms?

Yes -- this is one of its core value propositions. Migration Engine doesn't care who's doing the actual migration delivery. Insert it upstream of DataFirst (via IES-Advisors), Laurel Bridge Compass / Navigator, DicomSys UVR, or any customer-incumbent migration platform. Migration Engine normalizes character sets and malformed headers, coerces common tag misalignments, and hands clean data to whatever platform is doing the actual move. Net effect: higher throughput, fewer retries, less quarantine queue volume on the downstream platform -- without disturbing an existing investment.

What's the difference between coercion and transformation?

Coercion forces values into expected formats without changing their semantic meaning -- accession-number padding, date-string format normalization, AE-Title remapping. It's cheap, parallelizable edge work. Transformation (which lives in VNA Migration, not here) changes values semantically per a documented audit-trailed rule -- e.g., re-mapping a study description from a source institutional code to a target institutional code per a migration plan. Migration Engine handles coercion; downstream systems handle transformation.

How does the AI-vendor PHI-shielding workflow work here?

Same family-wide mechanism as the Router, SR Engine, and VNA family. Migration Engine uses keyed-hash pseudonymization on the way out (to the AI vendor), retains the source ↔ anon-ID mapping, and re-identifies AI-returned findings on the way back. Available in the Enterprise license tier. If the customer has multiple Synthology products, the site encryption key is shared for cross-product anon-ID consistency.

How is Migration Engine deployed alongside an existing third-party migration tool?

Insert upstream. The third-party tool keeps its own configured source connections, workflow, and target. Migration Engine becomes a new "source" for the third-party tool -- but with pre-cleaned data that flows through normalization and coercion before the third-party tool sees it. The customer's migration plan, project schedule, and stakeholder reporting don't change; Migration Engine improves the throughput transparently.

What's the regulatory classification?

Non-device software under FD&C Act §520(o)(1)(D), the 21st Century Cures Act §3060 carve-out for software that transfers, stores, converts, or displays device data without interpreting or analyzing it. Same framework as Router, VNA Repository, VNA Migration, and SR Engine -- Migration Engine handles storage and forwarding without modifying clinical interpretation. Coercion is constrained to syntactic / format-level changes; semantic value changes are out of scope (those belong in VNA Migration).

Is Migration Engine cross-platform?

Yes -- Windows and Linux, same as the rest of the router-pattern family. MSI installer for Windows, self-contained Linux tarball for Linux. Multi-worker deployments can mix OS platforms.

Talk through your migration cleanup needs.

Standalone migration? Front-end for VNA Migration? Cleanup layer for an existing third-party migration tool? Modality- side cleanup that’s become a daily ops headache? Tell us the shape and we’ll come back within one business day with a proposed deployment.