XyDromatics Migration Engine Specialized engine · Universal pre-processor

XyDromatics Migration Engine — vendor-agnostic by design.

The right-sized migration appliance — and the universal pre-processor for any migration project. Use it standalone for small / medium migrations, in front of VNA Migration for large engagements, or as a normalization + tag-coercion layer in front of third-party migration tools (DataFirst, Laurel Bridge, DicomSys, or a customer’s incumbent platform). Migration Engine doesn’t care who’s doing the actual migration delivery.

Same family-platform features as the rest of the router- pattern hosts — keyed-hash pseudonymization, built-in honest-broker capability, shared site encryption key when deployed alongside other Synthology products.

Capabilities

Cheap, parallelizable edge work — for any migration target.

Migration Engine focuses on the syntactic cleanup that makes downstream verification, transformation, and audit faster — regardless of who’s doing the downstream work.

Multi-source ingestion

Read from any DICOM-conformant source, plus filesystem and HL7-driven inputs. Same source-system breadth as VNA Migration in a smaller footprint.

  • C-STORE SCU (push from source) + SCP (pull-style ingest)
  • Q/R against the source archive (C-FIND + C-MOVE / C-GET)
  • STOW-RS for modern HTTP-based source systems
  • HL7 / MWL-driven ingest (orders + worklist trigger pulls)
  • File-watcher ingest for offline / disconnected sources
  • Bulk DICOMDIR + filesystem-walk for raw exports

Normalization at the edge

The cheap, parallelizable cleanup work that makes downstream verification + audit faster. Run multiple Migration Engine workers; let downstream tools focus on their actual jobs.

  • Character-set normalization (legacy non-UTF-8 sources)
  • Malformed-header repair (legacy systems wrote non-spec data)
  • Deprecated VR (Value Representation) coercion
  • Non-spec timestamp formatting normalized to spec-compliant
  • SOP Instance UID validation + remediation where possible
  • Per-source-vendor profile handling (vendor X always emits this quirk)

Tag coercion

Force common tag values into the formats downstream systems expect — without changing the value semantics. Distinct from VNA Migration's audit-heavy tag transformation.

  • Accession-number padding / formatting per institutional standard
  • Date-string format normalization (YYYYMMDD vs ISO-8601)
  • AE-Title remapping (legacy modality AE-Titles -> current naming convention)
  • Patient-name format coercion (e.g., FAMILY^GIVEN canonicalization)
  • Study Description / BodyPartExamined normalization to RadLex / institutional codes
  • Configurable coercion rules per source / per modality

Scheduled sends + retry

A standalone migration appliance has to manage its own pacing. Built-in scheduling, retry policies, and dead-letter handling.

  • Scheduled migration windows (off-peak only, weekends only, etc.)
  • Per-destination bandwidth caps + priority queues
  • Exponential-backoff retry with configurable policy
  • Dead-letter queue for persistently-failing sends
  • Pause / resume with state checkpointing
  • Concurrent worker support for parallel sends

Universal pre-processor (vendor-agnostic)

Migration Engine doesn't care who's doing the actual migration delivery. Normalize and coerce upstream of any target platform — Synthology or third-party.

  • Front-end for XyDromatics VNA Migration (packaged pattern for large engagements)
  • Front-end for DataFirst engagements (via IES-Advisors)
  • Front-end for Laurel Bridge migration tools (Compass, Navigator)
  • Front-end for DicomSys migration tools (UVR)
  • Front-end for customer's existing migration platform (any DICOM-conformant target)
  • Standalone — no downstream migration platform required when Migration Engine handles the full move

Family-platform features

Same platform features as the rest of the router-pattern family.

  • Keyed-hash pseudonymization with shared site encryption key (anon-IDs consistent across the customer's product portfolio)
  • Built-in honest-broker capability for studies anonymized by Migration Engine
  • AI-vendor PHI-shielded round-trip workflow
  • Web administration UI with shared sidebar shell
  • Role-based access control with full permission catalog
  • Hash-chain audit log for migrated studies
  • 21 CFR Part 11-aligned audit trail

Architecture

Source · Migration Engine · any downstream target.

The architectural shape is deliberately flexible — Migration Engine sits between source and target, and the target can be any migration platform (Synthology, third-party, customer- incumbent) or a final archive directly.

XyDromatics Migration Engine architecture Migration Engine reads from a source archive, performs normalization and tag coercion at the edge, and forwards cleaned data to any downstream target — Synthology VNA Migration / Repository / Clinical / SR Engine, third-party migration tools (DataFirst, Laurel Bridge, DicomSys), or a final archive directly. Multiple Migration Engine workers scale horizontally for large migrations. SOURCE MIGRATION ENGINE scales horizontally ANY DOWNSTREAM TARGET Source archive Legacy PACS / VNA Filesystem export Q/R · C-STORE · STOW-RS · HL7/MWL Migration Engine Non-device software Worker 1 Normalization Tag coercion Worker 2 Normalization Tag coercion + Worker N (parallel scale) Keyed-hash pseudonymization · Honest-broker capability shared site encryption key with Router / VNA / SR Engine Synthology VNA Migration packaged front-end Synthology VNA / Router / SR direct write DataFirst (via IES) third-party front-end Laurel Bridge / DicomSys third-party front-end ...or any DICOM-conformant target Vendor-agnostic by design Migration Engine doesn't care who's doing the actual migration delivery — it cleans the input

Deployment patterns

Six deployment shapes.

Customers use Migration Engine in multiple complementary patterns. Standalone for small projects, front-end for VNA Migration on large engagements, front-end for third-party tools where the customer has an incumbent platform, modality- side cleanup as a permanent fix.

Pattern 1

Standalone small / medium migration

A bounded migration project — single source PACS, one or two target archives, weeks-to-months runway. Migration Engine handles the full move: read source, normalize, coerce, send to target. No need for the multi-petabyte VNA Migration heavyweight.

Flow

  1. 1 Source: legacy PACS via Q/R or filesystem export
  2. 2 Migration Engine ingests with normalization + coercion at the edge
  3. 3 Per-source / per-modality cleanup rules applied
  4. 4 Studies forwarded to target archive (any DICOM-conformant)
  5. 5 Hash-chain audit log + completion report at engagement end
Pattern 2

Front-end for XyDromatics VNA Migration

Large multi-petabyte migrations benefit from horizontal pre-processing. Multiple Migration Engine workers normalize + coerce in parallel; clean data flows into VNA Migration which focuses on per-study verification, full tag transformation, and hash-chain audit.

Flow

  1. 1 Multiple Migration Engine workers deployed in parallel
  2. 2 Each worker reads a partition of the source archive
  3. 3 Normalization + coercion happens at the edge (cheap, parallel)
  4. 4 Clean data flows to VNA Migration for verification + audit + transformation
  5. 5 VNA Migration writes to the final target with full audit trail
  6. 6 Net effect: meaningfully higher overall throughput vs VNA Migration alone
Pattern 3

Front-end for DataFirst (via IES-Advisors)

IES-Advisors engagements using DataFirst as the migration platform can layer Migration Engine in front to handle the syntactic cleanup that DataFirst doesn't natively do — character sets, malformed headers, deprecated VRs. Migration Engine cleans; DataFirst delivers.

Flow

  1. 1 IES-Advisors scoped engagement using DataFirst as the migration platform
  2. 2 Migration Engine deployed as front-end pre-processor
  3. 3 Source data flows through Migration Engine first
  4. 4 Normalized, tag-coerced data flows into DataFirst
  5. 5 DataFirst handles deduplication and cross-vendor consolidation against clean input
  6. 6 Customer benefits from improved throughput without changing the DataFirst engagement shape
Pattern 4

Front-end for Laurel Bridge / DicomSys / third-party migration tools

Customer has an existing migration tool (Laurel Bridge Compass, DicomSys UVR, or another vendor's platform) and wants to add Migration Engine as a normalization + coercion layer to improve migration throughput and reduce retry / quarantine volume on their existing tool.

Flow

  1. 1 Existing migration tool already deployed at customer site
  2. 2 Migration Engine inserted upstream as the pre-processor
  3. 3 Source data normalized and coerced before reaching the existing tool
  4. 4 Existing tool sees cleaner data, fewer retries, less quarantine queue volume
  5. 5 Customer keeps their incumbent migration platform investment
  6. 6 Migration Engine licensable standalone — no other Synthology products required
Pattern 5

Modality-side cleanup pre-PACS

A single modality (or a small group) emits chronically malformed DICOM that downstream PACS struggles with. Migration Engine sits in front of the PACS as a permanent cleanup layer — turning bad-data emission into an architecture problem rather than a daily ops headache.

Flow

  1. 1 Modality emits DICOM with vendor-specific quirks
  2. 2 Migration Engine ingests, normalizes, coerces
  3. 3 Clean DICOM forwarded to PACS / VNA
  4. 4 PACS receives reliable data; ops team stops fielding daily "this study won't open" tickets
  5. 5 Vendor-specific quirk profile maintained by Migration Engine, not by every downstream system
Pattern 6

AI-vendor integration without sharing PHI

Same family-wide round-trip pattern as the Router and the VNA siblings. Migration Engine de-identifies via keyed-hash on the way out, AI vendor analyzes anonymized data, findings come back, Migration Engine re-identifies and routes findings to the correct downstream destination.

Flow

  1. 1 Source study qualifies for AI analysis
  2. 2 Migration Engine de-identifies via keyed-hash pseudonymization
  3. 3 De-identified study sent to AI vendor (vendor sees only anon-ID)
  4. 4 AI vendor returns findings tagged with the anon-ID
  5. 5 Migration Engine re-identifies via the retained mapping
  6. 6 Findings forwarded to PACS / EMR linked to the correct patient

Integration points

Sources, Synthology targets, third-party targets.

Migration Engine’s third-party-target list is what makes it vendor-agnostic. Customers running an incumbent migration platform don’t have to choose between replacing it and skipping the cleanup benefits — Migration Engine slots in upstream of any DICOM-conformant target.

Source systems (read from)

  • Any DICOM-conformant SCP via Q/R
  • Legacy PACS / VNA across all major vendors
  • Filesystem exports (DICOMDIR, raw tree)
  • HL7 / MWL-driven ingest for order-and-worklist-correlated migrations
  • See /products/vna-migration#integrations for the multi-specialty vendor lineage

Downstream targets (Synthology)

  • XyDromatics VNA Migration (front-end pattern, packaged deployment)
  • XyDromatics VNA Repository (retention-tier writes)
  • XyDromatics VNA Clinical / Clinical Research
  • XyDromatics Router (routing layer downstream of cleanup)
  • XyDromatics SR Engine (for SR-specific migrations)

Downstream targets (third-party)

  • DataFirst migration platform (via IES-Advisors)
  • Laurel Bridge Compass / Navigator
  • DicomSys UVR
  • Customer's existing migration platform (any DICOM-conformant)
  • Direct STOW-RS endpoints for cloud archives

Cross-product orchestration

  • Shared site encryption key (consistent anon-IDs across the customer's portfolio)
  • Shared admin shell (consistent operational surface across products)
  • Shared audit-trail format (cross-product audit aggregation)
  • SynthQMS integration for migration-plan change control

Identity, audit, observability

  • OIDC / SAML for the web admin UI
  • Active Directory / Azure AD federation
  • Per-AE-Title audit trail entries
  • Hash-chain audit log
  • Prometheus metrics + structured JSON logs
  • Webhook outputs for SIEM integration

System requirements & sizing

Sized to throughput, scales horizontally.

Migration Engine workers scale linearly until source-side throttling becomes the bottleneck. Add workers; throughput adds. Sizing is per-worker.

Tier Workload CPU RAM Notes
Worker (single) 1 – 5 TB / day throughput 4 vCPU 8 GB Standalone single-site migration. Modality-side cleanup. Single front-end worker for medium VNA Migration engagements.
Worker pair (2 workers) 5 – 15 TB / day aggregate 4 vCPU per worker 8 GB per worker Larger standalone migrations, or 2-worker front-end for VNA Migration / third-party tools.
Worker cluster (4+ workers) 15+ TB / day aggregate 8 vCPU per worker 16 GB per worker Multi-petabyte migrations as VNA Migration front-end, or large-scale standalone consolidation.

Licensing

Three packages, project-scoped or perpetual.

Migration Engine licensing fits both project shapes: short-engagement migrations (project-scoped) and ongoing modality-cleanup deployments (perpetual). Tier choice depends on the breadth of coercion needs and whether AI-vendor PHI shielding is required.

Migration Engine Core

The base appliance — multi-source ingest, normalization, basic forwarding. Suited for standalone small / medium migrations.

  • C-STORE / Q/R / STOW-RS source + target
  • Character-set + malformed-header normalization
  • Standard tag coercion rules
  • Scheduled sends with retry
  • Web admin UI + RBAC
  • Up to 50 TB total migrated

Migration Engine + Coercion

Adds full per-source coercion profiles, vendor-quirk handling, and HL7 / MWL-driven ingest.

  • Everything in Core
  • Per-source-vendor profile catalog
  • Custom coercion rules per source / per modality
  • HL7 / MWL-driven ingest
  • RadLex / institutional-code normalization
  • Up to 250 TB total migrated

Migration Engine Enterprise

Everything, plus parallel worker deployment, AI-vendor PHI shielding, and family-platform features.

  • Everything in Core + Coercion
  • Multi-worker parallel deployment (front-end pattern)
  • Keyed-hash pseudonymization for AI-vendor PHI shielding
  • Built-in honest-broker capability for re-identification
  • Hash-chain audit log
  • Cross-product site-key sharing (with Router / VNA family / SR Engine)
  • Unlimited migration capacity
  • Premium support tier eligible

Project-scoped licensing for short-engagement migrations; perpetual licensing for ongoing modality-cleanup deployments. Multi-product bundles (Migration Engine + VNA Migration, or Migration Engine + Router + VNA family) get bundle pricing and shared site-key provisioning.

Documentation

The controlled-document set.

Every Migration Engine deployment ships with the documents below, all managed under SynthQMS document control. The DICOM Conformance Statement is publicly available; the rest are shared under mutual NDA.

Document Title Notes
DOC-2026-103 Hardware & Software Requirements (Migration Engine) Sizing, OS support, dependencies
DOC-2026-099 DICOM Conformance Statement (Migration Engine) Public — full SOP class + transfer-syntax matrix
DOC-2026-106 EULA Annex (Migration Engine) Annex to the Synthology Master EULA (DOC-2026-063)
DOC-2026-098 Penetration Test Results (Migration Engine) Available under NDA
DOC-2026-108 QA Runner Manual (Migration Engine) Internal QA + customer-validated test runs
DOC-2026-105 User Guide (Migration Engine) Operator + administrator workflows
DOC-2026-104 Installation Guide (Migration Engine) Includes MSI deploy + Linux tarball + multi-worker pattern

Additional documents

Migration Engine-specific documents beyond the standard set. Items marked Pending are tracked for authoring under SynthQMS change control.

Document Title Notes
DOC-2026-400 Vendor-Quirk Profile Catalog (Migration Engine) Per-vendor known-quirk profiles maintained as living documentation

Frequently asked

The questions prospects ask.

How is Migration Engine different from VNA Migration?

Different scale and different shape -- but they're often deployed together. Migration Engine is the smaller-footprint appliance: standalone for small / medium migrations, or as a horizontal pre-processor in front of VNA Migration on large engagements. VNA Migration is the multi-petabyte workhorse with full HA, parallel worker nodes, multi-month migration plans, full per-study verification, transformation, and hash-chain audit. Same family, complementary roles.

Does Migration Engine require VNA Migration or any other Synthology product?

No. Migration Engine is fully standalone-licensable. Many customers buy it on its own for small / medium migration projects, modality-side cleanup, or as a pre-processor for their existing third-party migration platform (DataFirst, Laurel Bridge, DicomSys, etc.). No other Synthology product required. If the customer later adds Router / VNA family / SR Engine, the products inherit the same site encryption key for cross-product anon-ID consistency.

Can Migration Engine work with non-Synthology migration platforms?

Yes -- this is one of its core value propositions. Migration Engine doesn't care who's doing the actual migration delivery. Insert it upstream of DataFirst (via IES-Advisors), Laurel Bridge Compass / Navigator, DicomSys UVR, or any customer-incumbent migration platform. Migration Engine normalizes character sets and malformed headers, coerces common tag misalignments, and hands clean data to whatever platform is doing the actual move. Net effect: higher throughput, fewer retries, less quarantine queue volume on the downstream platform -- without disturbing an existing investment.

What's the difference between coercion and transformation?

Coercion forces values into expected formats without changing their semantic meaning -- accession-number padding, date-string format normalization, AE-Title remapping. It's cheap, parallelizable edge work. Transformation (which lives in VNA Migration, not here) changes values semantically per a documented audit-trailed rule -- e.g., re-mapping a study description from a source institutional code to a target institutional code per a migration plan. Migration Engine handles coercion; downstream systems handle transformation.

How does the AI-vendor PHI-shielding workflow work here?

Same family-wide mechanism as the Router, SR Engine, and VNA family. Migration Engine uses keyed-hash pseudonymization on the way out (to the AI vendor), retains the source ↔ anon-ID mapping, and re-identifies AI-returned findings on the way back. Available in the Enterprise license tier. If the customer has multiple Synthology products, the site encryption key is shared for cross-product anon-ID consistency.

How is Migration Engine deployed alongside an existing third-party migration tool?

Insert upstream. The third-party tool keeps its own configured source connections, workflow, and target. Migration Engine becomes a new "source" for the third-party tool -- but with pre-cleaned data that flows through normalization and coercion before the third-party tool sees it. The customer's migration plan, project schedule, and stakeholder reporting don't change; Migration Engine improves the throughput transparently.

What's the regulatory classification?

Non-device software under FD&C Act §520(o)(1)(D), the 21st Century Cures Act §3060 carve-out for software that transfers, stores, converts, or displays device data without interpreting or analyzing it. No FDA Device Listing required. Same framework as Router, VNA Repository, VNA Migration, and SR Engine -- Migration Engine handles storage and forwarding without modifying clinical interpretation. Coercion is constrained to syntactic / format-level changes; semantic value changes are out of scope (those belong in VNA Migration).

Is Migration Engine cross-platform?

Yes -- Windows and Linux, same as the rest of the router-pattern family. MSI installer for Windows, self-contained Linux tarball for Linux. Multi-worker deployments can mix OS platforms.

Talk through your migration cleanup needs.

Standalone migration? Front-end for VNA Migration? Cleanup layer for an existing third-party migration tool? Modality- side cleanup that’s become a daily ops headache? Tell us the shape and we’ll come back within one business day with a proposed deployment.