Solutions · By team · IT and security
One cloud system for the work, on top of the systems you already run.
It can run on top of your RIS, PACS and RCM, over HL7, FHIR and the browser where no interface exists. AWS US regions only. HIPAA compliant, with a BAA with every customer. Independently penetration-tested every year.
For CIOs, IT and security leads
“We were up and running in days rather than the months we would typically expect from a project of this scale.”
Michael Riesberg, Chief Information Officer, Iowa Radiology
See it work
Walkthrough: one order's data, in and back out
Walkthrough · 1:44
What changes
The same stack, fewer places for work to leak
Today
- A phone system, a fax service and a texting tool, each its own vendor
- Interfaces nobody can see into
- Data re-keyed between the RIS and payer portals
- Servers to install and patch at every site
With Gravity
- Voice, chat and document built in, on your own numbers
- Every inbound message and how it was processed, visible to admins
- Every change reaching your other systems as it happens
- Cloud, nothing to install, in the browser on any computer
How it runs
How Gravity connects to your RIS and EHR, record by record
One order's data, from the system that sent it to the systems that need it. Each step names the part of Gravity that does it.
| Step | What happens | Feature | Done by |
|---|---|---|---|
| 01 | Patients, orders, schedules and results move in and out of the RIS you already run over standard HL7 messages. | HL7 interfaces | Gravity Developer |
| 02 | Each record type, from patients to results, gets its own direction and identity rule. | Sync profiles by record type | Gravity Developer |
| 03 | Every service has a documented REST and GraphQL API with admin-managed keys, and FHIR reaches the EHRs your referrers run. | APIs: REST, GraphQL and FHIR | Gravity Developer |
| 04 | Orders and other records load from a CSV upload or a scheduled SFTP file drop, and go out the same way. | Flat-file sync (CSV, SFTP) | Gravity Developer |
| 05 | Voice, chat and document are built in, on the center's own numbers, and every call, text, fax and email is kept on the order timeline. | Conversation history | Gravity Communication |
| 06 | Every change can reach your other systems as it happens, and you can see each connection and what it receives. | Outbound events and webhooks | Gravity Developer |
| 07 | Approved AI agents connect through a registered, permission-checked interface. | AI agent connection (MCP) | Gravity Developer |
| 08 | Staff sign in with the work account they already have, and a change in your identity provider adds or removes the user in Gravity on its own. | Single sign-on | Gravity Trust |
| 09 | Each person sees and does only what their job needs. | User groups and permissions | Gravity Trust |
| 10 | Every record shows who changed which field, when, and from what to what. | Audit timeline | Gravity Trust |
| 11 | The whole story of an order on one screen, from first document to final report. | Order timeline | Gravity Trust |
| 12 | The Alpha Nodus team configures the interfaces, numbers and settings for each center during onboarding. | Implementation and setup | Gravity Developer |
If the other system has an interface, Gravity can connect to it.
Security
Where Gravity runs, and who protects it
Fewer vendors and interfaces to manage, and fewer to secure.
- Hosted on AWS in US regions only.
- A HIPAA Business Associate Agreement with every customer.
- Every sub-processor used in Gravity has a BAA with Alpha Nodus.
- Independently penetration-tested every year.
- Data encrypted at rest with per-tenant keys.
- MFA on every production login, SSO on Enterprise.
- Controls monitored continuously, with a public Trust Center.
Gravity today
- 5.7 millionimaging orders a year processed by Gravity
Trusted by more than 460 imaging centers across the US.
Questions
Questions from IT and security
Does Gravity integrate with our RIS and EHR?
It can run on top of the systems you already run. If the other system has an interface, Gravity can connect to it: HL7, FHIR, REST, GraphQL, MCP and flat files (CSV, SFTP).
Is cloud safe for PHI?
Hosted on AWS in US regions only. A HIPAA Business Associate Agreement with every customer. Every sub-processor used in Gravity has a BAA with Alpha Nodus. Independently penetration-tested every year. Data encrypted at rest with per-tenant keys. MFA on every production login, SSO on Enterprise. Controls monitored continuously, with a public Trust Center. Read it at security.alphanodus.com.
Will you break my interfaces?
The Alpha Nodus team configures the interfaces for each center during onboarding, and admins see every message received from connected systems and how it was processed.
Is there anything to install?
No. Gravity is cloud, with nothing to install. It runs in the browser on any computer; check-in runs on an iPad.
Can our staff use single sign-on?
Yes. Staff sign in with the work account they already have, and IT keeps control of access. With single sign-on, a change in your identity provider adds or removes the user in Gravity on its own.
For CIOs
Nothing to installGravity runs in the browser on any computer, on top of the systems you already run.