XyDromatics Router Router-pattern host · Flagship

XyDromatics Router — DICOM routing platform.

Ingest from any modality, route by rules, transform tags, anonymize, prefetch, hold and release. The flagship workflow orchestrator — both the operating-control plane for an imaging department and the integration hub between modality, EMR, PACS, VNA, and reporting.

Capabilities

What the Router actually does.

Organized by functional area. Every capability listed below is part of the shipping product — not roadmap.

DICOM I/O

Standard inbound and outbound paths for any modality or downstream system.

  • C-STORE SCP (DICOM Store) — inbound from any modality or upstream node
  • C-STORE SCU — outbound to any DICOM-conformant destination
  • STOW-RS endpoint — modern HTTP-based store
  • WADO-RS / WADO-URI for ad-hoc retrieval
  • Q/R SCU — query/retrieve from upstream PACS/VNA
  • Configurable AE-Title list with per-AE access control

Routing & rule engine

The core. Rules execute on every received study, deciding what to do with it.

  • Per-rule destination(s) — fan-out, conditional, prioritized
  • Match conditions on any DICOM tag (modality, body part, station name, scheduled procedure step, custom private tags)
  • Boolean composition (AND/OR/NOT) with grouping
  • Time-of-day and day-of-week scheduling per rule
  • Rule simulation mode — test against historical studies before activating
  • Rule export / import as version-controlled JSON

Transformation

In-flight modification of studies as they pass through the router.

  • Tag-level rewrite (set / unset / map values)
  • Anonymization profiles aligned with DICOM PS3.15 Annex E
  • Keyed-hash pseudonymization — same patient always maps to the same anon-ID; a per-customer site encryption key is the keying material (shared across all router-pattern products in the customer's portfolio for cross-product consistency)
  • Built-in honest-broker capability for studies the Router anonymized — IRB / policy-gated re-identification, recontact, longitudinal linkage, AI-vendor round-trip integration
  • Pixel-data redaction with regional masks
  • Character-set normalization
  • Per-destination transformations (different downstream systems get different versions)
  • Audit log of every transformation applied

Hold queue & manual release

Studies routed to the hold queue wait for human approval before forwarding.

  • Sensitive-study hold rules (VIP, employee, behavioral health, etc.)
  • Reviewer queue UI with full study preview
  • Approve / modify / reject workflow with required reason text
  • Auto-expire policy with configurable retention
  • Reviewer audit trail (who released which study, when, why)

Prefetch

Pull priors and related studies ahead of an appointment to make them available before reads.

  • HL7-driven prefetch (ADT or scheduling messages trigger pulls)
  • Worklist-driven prefetch (pull studies the worklist references)
  • Patient-history prefetch (pull all priors for a given MRN)
  • Scheduled prefetch windows (overnight pull for tomorrow's appointments)
  • Q/R against multiple upstream archives in priority order

HL7 / FHIR integration

Two-way communication with the EMR for orders, results, and worklist generation.

  • HL7 v2 ingest — ADT, ORM, ORU message types
  • HL7 v2 emit — order acknowledgements, results
  • FHIR R4 endpoints for ServiceRequest, ImagingStudy, DiagnosticReport
  • Worklist generation (DMWL — Modality Worklist) from EMR orders
  • HL7 to DICOM-tag mapping (configurable per-interface)
  • Message-level audit log with replay capability

Operations & administration

The day-to-day surfaces operators use to run the router.

  • Web administration UI with shared sidebar shell (consistent across the XyDromatics family)
  • Role-based access control with permission catalog (every page assignable)
  • Real-time dashboard — throughput, error rates, queue depth
  • Comprehensive audit log (21 CFR Part 11-aligned)
  • Webhook outputs for external monitoring / SIEM integration
  • Synthology QMS integration for change control on rule-set edits

Architecture

Where the Router sits.

Conceptually: between modalities and downstream systems. In practice, often in front of the entire imaging stack as the single integration point that routes, transforms, and gates every study that flows through.

XyDromatics Router architecture The Router exchanges traffic bidirectionally with most connected systems. Modalities push studies via DICOM C-STORE or STOW-RS and pull worklists via Modality Worklist (DMWL) C-FIND. The EMR/EHR sends HL7 / FHIR orders and receives results. Downstream, the Router forwards studies to PACS, VNA, and AI/reporting destinations and queries those same archives for prior-study prefetch and findings ingestion. Modalities CT · MR · US · XA · NM · MG EMR / EHR Epic · Cerner DICOM C-STORE / STOW-RS studies in DMWL C-FIND / Response worklist out HL7 v2 / FHIR R4 ADT · ORM · ORU orders in / results out XyDromatics Router Rule engine + transforms Hold queue · Prefetch · Worklist forward · Q/R archive · Q/R prefetch forward · findings back PACS Diagnostic viewers priors via Q/R VNA Long-term archive priors via Q/R AI / Reporting Image sharing findings via HL7/FHIR/SR

The Router is a single binary on Windows or Linux. Active-active HA pairing is supported on the Enterprise license tier. State (queue depth, audit log, rule history) persists in a backing database — PostgreSQL, SQL Server, or SQLite for small deployments.

Common use cases

Five typical deployment patterns.

Most Router deployments combine two or three of these. The patterns below are common building blocks; real deployments mix and match.

Pattern 1

Modality consolidation hub

All modalities forward to the Router; the Router applies routing rules to fan studies out to PACS, VNA, AI applications, and remote-read destinations.

Flow

  1. 1 Modality (CT, MR, US, etc.) emits study via DICOM Store
  2. 2 Router receives, validates, and applies rule engine
  3. 3 Conditional forwards to one or more destinations
  4. 4 Audit log records the full path of every study
Pattern 2

PACS migration cutover

During a PACS replacement, the Router runs in front of both old and new archives. Studies double-route during the parallel-run window; cutover is a config flip.

Flow

  1. 1 Modalities continue sending to Router (no modality-side change)
  2. 2 Router writes to old + new archives simultaneously
  3. 3 Reads validated against new archive in parallel
  4. 4 Cutover = single rule change to drop old destination
Pattern 3

AI-application integration (with optional PHI shielding)

New AI vendor needs a feed of relevant studies (e.g., chest CTs for triage). The Router applies a body-part + modality filter and forwards a copy without disrupting the primary clinical workflow. For AI vendors that don't want BAA scope, the Router can de-identify on the way out and re-identify findings on the way back via keyed-hash pseudonymization.

Flow

  1. 1 Define rule: modality=CT AND body part=CHEST
  2. 2 Optional: anonymization gate de-identifies via keyed-hash pseudonymization (anon-ID derived from PHI + system encryption key)
  3. 3 Forward to AI vendor STOW-RS endpoint (vendor sees only anon-ID if anonymization is on)
  4. 4 AI vendor returns findings via HL7 / FHIR / SR tagged with anon-ID (or original UID)
  5. 5 Router re-identifies findings using the retained mapping and routes back to PACS / EMR linked to the correct patient
Pattern 4

VIP / sensitive-study handling

Hold-queue rules catch studies matching VIP / employee / behavioral-health criteria. Studies wait for reviewer approval before downstream forwarding.

Flow

  1. 1 Study arrives matching hold-criteria rule
  2. 2 Routed to hold queue, no downstream forward
  3. 3 Reviewer (clinical-systems team) opens study, reviews, approves or modifies
  4. 4 On approval, study forwards per normal rules with audit trail
Pattern 5

Anonymized research-feed

Research IRB approves a de-identified study set. The Router applies an anonymization profile and forwards a copy to a research VNA without affecting the clinical archive.

Flow

  1. 1 Clinical study arrives normally
  2. 2 Rule matches research-criteria (modality, date range, study description)
  3. 3 Anonymization transformation applied per IRB-approved profile
  4. 4 Anonymized copy forwards to research archive (e.g., VNA Research)
  5. 5 Original clinical study forwards to clinical archive unchanged

Integration points

What the Router connects to.

Organized by stack layer. Anything DICOM-conformant is integrable; the lists below highlight the systems we’ve deployed against most often.

Modalities

  • CT, MR, US, XA, NM, MG, CR, DX, RF (any DICOM-conformant modality)
  • GE, Siemens, Philips, Canon, Fujifilm, Hologic, etc.
  • PACS-less sites: Router as the edge ingest point for cloud-archived images

PACS / VNA

  • Source: GE Centricity, Siemens syngo.plaza, Philips Vue, Fujifilm Synapse, Merative Merge, Optum Change, Agfa, Hyland Acuo
  • Target: any DICOM-conformant archive — including XyDromatics VNA Repository
  • Bidirectional Q/R for prefetch + parallel-run migrations

EMR / EHR

  • Epic Radiant (radiology) + Cupid (cardiology)
  • Cerner PowerChart
  • HL7 v2 ADT / ORM / ORU
  • FHIR R4 ServiceRequest / ImagingStudy / DiagnosticReport
  • Worklist generation (DMWL) for modality consumption

Reporting

  • Microsoft (Nuance) PowerScribe
  • Jacobian (M*Modal) Fluency for Imaging
  • Epic Radiant native reporting
  • Outbound report distribution via HL7 ORU

AI applications

  • STOW-RS forward to AI vendor endpoints
  • Aidoc, Riverain, Gleamer, RapidAI, Heart Lung & Vessels, Cleerly, etc.
  • Findings ingest via HL7 / FHIR / SR (Structured Report)
  • Re-routing of AI findings back to PACS / EMR

Image sharing / portals

  • Hyland PowerShare
  • GE HealthCare (Intelerad) InteleShare
  • Microsoft Modlink
  • Custom portal endpoints via STOW-RS

System requirements & sizing

Sized to study volume.

The Router scales with study throughput, not with archive size — it’s a transit-and-transform engine, not a long-term store. Sizing tiers below are starting points; final sizing comes out of discovery.

Tier Study volume CPU RAM Storage Typical site
Small (single facility) < 200 studies / day 4 vCPU 8 GB 500 GB (queue + audit log) Imaging center, single-modality clinic, ambulatory site.
Medium (community hospital) 200 – 1,500 studies / day 8 vCPU 16 GB 1 TB Single hospital, full modality mix, regional reading group.
Large (academic / multi-site) 1,500 – 8,000 studies / day 16 vCPU (HA pair) 32 GB per node 2 TB per node Academic medical center, multi-hospital health system.
Enterprise (national / IDN) > 8,000 studies / day 32 vCPU (HA cluster, 3+ nodes) 64 GB per node 4 TB per node Large IDN, national reading network, enterprise-imaging platform.

Full hardware/software requirements are in DOC-2026-058 (HW/SW Requirements), available under NDA. Includes OS support matrix, supported databases, network requirements, and firewall configuration.

Whitepaper

Right-sizing for mammography — a measured deep-dive

We measured Router + SynthIQ on a dedicated rig across three host sizes. The finding: routine imaging is CPU-bound, 3D tomosynthesis (DBT) is memory-bound until RAM is ample — then CPU-bound — and disk IOPS is never the limit. Includes the full sizing matrix and the scale-out trigger.

Licensing

Four packages, à la carte add-ons.

The Core package covers the routing engine. Add HL7 and / or Prefetch as separate license features, or step up to Enterprise for everything plus pixel redaction, hold queue, and HA pairing.

Router Core

The base package — DICOM I/O, rule engine, basic transformation, audit log.

  • C-STORE SCP / SCU + STOW-RS / WADO-RS
  • Routing rule engine (unlimited rules)
  • Tag-level transformation
  • Standard anonymization profiles
  • Audit log + dashboard
  • Web admin UI + RBAC

Router + HL7

Adds HL7 v2 / FHIR integration and worklist generation.

  • Everything in Router Core
  • HL7 v2 ingest + emit
  • FHIR R4 endpoints
  • DMWL worklist generation
  • HL7-driven routing rules
  • HL7 message replay

Router + Prefetch

Adds intelligent prefetch from upstream archives.

  • Everything in Router Core
  • HL7-driven prefetch
  • Worklist-driven prefetch
  • Patient-history prefetch
  • Q/R against multiple upstream archives
  • Scheduled prefetch windows

Router Enterprise

Everything, plus pixel redaction, hold queue, and HA pairing.

  • Everything in Router Core + HL7 + Prefetch
  • Pixel-data redaction with regional masks
  • Hold queue + manual release workflow
  • Active-active HA pair with shared queue state
  • Synthetic-monitoring agent
  • Premium support tier eligible

Licensing is per-deployment, not per-study. Multi-site customers get site-discounted bundles; multi-product customers (Router + VNA Repository, Router + Migration Engine, etc.) get product-bundle pricing. Specific pricing in your engagement SOW.

Documentation

The controlled-document set.

Every Router deployment ships with the documents below, all managed under SynthQMS document control. The DICOM Conformance Statement is publicly available; the rest are shared under mutual NDA.

Document Title Notes
DOC-2026-058 Hardware & Software Requirements (Router) Sizing, OS support, dependencies
DOC-2026-074 DICOM Conformance Statement (Router) Public — full SOP class + transfer-syntax matrix
DOC-2026-064 EULA Annex (Router) Annex to the Synthology Master EULA (DOC-2026-063)
DOC-2026-394 Penetration Test Results (Router) Available under NDA
DOC-2026-089 QA Runner Manual (Router) Internal QA + customer-validated test runs
DOC-2026-387 User Guide (Router) Operator + administrator workflows
DOC-2026-069 Installation Guide (Router) Includes MSI deploy + Linux tarball install

Frequently asked

The questions prospects ask.

Does the Router require a VNA or PACS to be useful?

No. The Router is happy as the front door of any imaging stack. Common edge-deployment patterns: send modality output directly to a cloud archive via STOW-RS, or hold studies in the Router's queue while a downstream destination is offline. The Router becomes more powerful when paired with a VNA, but it doesn't require one.

How do rules execute when a study matches multiple rules?

All matching rules execute by default — fan-out is the common case (forward to PACS + AI vendor + research archive simultaneously). For exclusive routing, set rules to "stop on match" priority order. Each rule can be tagged with priority and short-circuit behavior.

What happens if a downstream destination is offline?

Studies queue locally with retry policy (configurable: exponential backoff with max retry window). Operators see queue depth on the dashboard. Once the destination recovers, the queue drains automatically. Persistent failures route to a dead-letter queue for manual handling.

Is the Router cross-platform?

Yes — Windows and Linux. The MSI installer covers Windows deployments; a self-contained Linux tarball covers Linux. Both are supported equally; the active-active HA pair can mix OS platforms if needed.

How is the rule set version-controlled?

Rules are exportable as JSON and versioned in the SynthQMS document control system. Every rule-set edit creates an auditable change record. The standing rule across the XyDromatics family is that rule changes go through the same document-control workflow as other configuration: draft, review, approve, archive.

What's the regulatory classification?

Non-device software under FD&C Act §520(o)(1)(D), the 21st Century Cures Act §3060 carve-out for software that transfers, stores, converts, or displays device data without interpreting or analyzing it. No FDA Device Listing required; no premarket review applicable. Same framework as every other Synthology product. See /regulatory for the full posture.

Can the Router run alongside a competitor router platform?

Yes. Common during phased rollouts: existing Laurel Bridge / DicomSys / DataFirst orchestrator continues to handle some rule sets while the XyDromatics Router takes over others. Cutover is rule-set by rule-set rather than big-bang.

What's the upgrade path?

Patch releases (1.X.Y.Z) deploy without downtime via active-active HA. Minor releases (1.X.Y) typically follow a quarterly cadence with a 30-day customer-validation window. Major releases (1.X) are annual and include a Migration Plan document under document control.

How does the keyed-hash pseudonymization work across multiple products in the family?

Each customer is provisioned with a per-customer site encryption key, and all router-pattern products in their portfolio share that key. So a customer running Router + VNA Migration + VNA Clinical Research has the same patient mapped to the same anon-ID across all three products. That cross-product consistency is what makes workflows like "Migration Engine ingests legacy data into VNA Research, then VNA Clinical Research's broker capability re-links findings back to clinical" actually work. Site-key provisioning is part of the multi-product license bundle; it's also a customer-security-governed item, so we coordinate with your security team on key custody, rotation policy, and escrow.

See the Router in action.

A 30-minute walkthrough with a Synthology engineer — your environment, your routing scenarios, your questions. We’ll come back within one business day with proposed times.