Compare Open Telekom Cloud and Unomed Cloud PACS on capabilities, jurisdiction, assurance, and fit for European buyers.
Both listed as alternatives to: Amazon Web Services (AWS), Microsoft Azure
Germany· Cloud Computing
Needs review
Shortlist when you need a German Telekom/T-Systems OpenStack public cloud with DE/NL/CH regions and a strong BSI C5/ISO/TISAX package for regulated or public-sector workloads. Skip when you need hyperscaler global PaaS breadth or pure self-hosted OpenStack—consider OVHcloud, Scaleway, or AWS/Azure for those cases.
Switzerland· Cloud Computing
Needs review
Shortlist for Swiss practices that want a cloud DICOM archive, browser viewing and referrer sharing without replacing their PIS, and that accept a Zurich SaaS vendor with claimed Swiss image hosting. Skip when you need a default CE-marked diagnostic viewer, a fully public subprocessor and audit pack, or a self-hosted PACS you operate yourself. Consider PostDICOM or a classic on-prem PACS plus sharing tool when those constraints dominate.
Highlighted rows differ between the two products.
| Feature | Open Telekom Cloud | Unomed Cloud PACS |
|---|---|---|
| Country of origin | Germany | Switzerland |
| Category | Cloud Computing | Cloud Computing |
| Open source | No | No |
| Self-hosted | No | No |
| Headquarters | Germany | Switzerland |
| Legal entity | T-Systems International GmbH (Deutsche Telekom group); product marketed as T Cloud Public / Open Telekom Cloud | Unomed AG |
| Governing law | German / EU law for the cloud service (confirm contract) | Not listed |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Low | Medium |
| EU-hosted status | Not listed | Partial |
| Hosting / residency | Primary: Telekom/T-Systems twin-core data centers in Germany (Biere/Magdeburg), Netherlands (Amsterdam region), and Switzerland (Bern/Zollikofen). No public indication that AWS, Azure, or GCP is the primary IaaS host. Backups/DR via platform multi-AZ services. Full public subprocessor table not found—request DPA annex. Historical Huawei technology partnership is supply-chain diligence, not US-cloud hosting. | Vendor claims primary hosting, databases and DICOM storage in Switzerland. Privacy policy lists identity/liveness processing in EU (Ireland) and speech recognition in EU (Denmark). API CSP references AWS S3 eu-central-2 (Zurich) and AWS Rekognition/Cognito eu-west-1; push via Firebase; website may use Cloudflare WAF cookies and Google Analytics. Named subprocessor list on request only. |
| Summary | Deutsche Telekom / T-Systems sovereign European public cloud (now marketed as T Cloud Public): OpenStack-based IaaS and platform services in Germany, Netherlands, and Swiss regions with BSI C5, ISO, and SOC attestations. | Swiss cloud PACS and vendor-neutral archive for storing, viewing and sharing DICOM medical images in the browser, integrated with existing medical practice workflows. |
| Tags |
| At a glance | Open Telekom Cloud | Unomed Cloud PACS |
|---|---|---|
| HQ / operator | Germany — T-Systems / Deutsche Telekom | Not listed |
| Current brand | T Cloud Public (formerly Open Telekom Cloud) | Not listed |
| Platform | OpenStack-based public cloud | Not listed |
| Regions | Germany (Biere/Magdeburg), Netherlands, Switzerland | Not listed |
| Commercial model | Pay-as-you-go (+ optional discounts/reservations) | Not listed |
| Self-host | No — managed public cloud | Not listed |
| HQ | Not listed | Zurich, Switzerland |
| Legal entity | Not listed | Unomed AG (CHE-374.858.885) |
| Product type | Not listed | Cloud PACS / VNA SaaS |
| Self-hosted | Not listed | No (local connector only) |
| Default viewer | Not listed | OHIF (not for diagnosis per GTCs) |
| Data residency regions | Not listed | Switzerland claimed for DICOM/hosting; some auxiliary processing in EU (IE/DK) per privacy policy |
| Key capabilities | Open Telekom Cloud | Unomed Cloud PACS |
|---|---|---|
| EU-operated (T-Systems) | Yes | Yes |
| OpenStack public IaaS | Yes | Not listed |
| BSI C5 Type II (claimed) | Yes | Not listed |
| DE / NL / CH regions | Yes | Not listed |
| GPU + ModelArts AI | Yes | Not listed |
| Pay-as-you-go | Yes | Not listed |
| Cloud PACS / VNA | Not listed | Yes |
| DICOM archive | Not listed | Yes |
| Browser viewer | Not listed | Yes |
| PIS overlay | Not listed | Yes |
OpenStack public cloud with Elastic Cloud Server and GPUs
Self-service IaaS on OpenStack: Elastic Cloud Server flavors from general-purpose to GPU shapes for AI/ML and graphics, plus Dedicated Host and Bare Metal where the region supports them. Provision via console, API, or automation; Auto Scaling for metric-driven capacity. Suited to production VMs and hybrid patterns that need European operator control rather than a thin VPS plan.
Multi-AZ object, block, and file storage in EU regions
Object Storage Service provides S3-compatible multi-AZ object storage; Elastic Volume Service attaches block disks with snapshots; Scalable File Service offers NFS shared filesystems. Cloud Backup and Recovery and related services back up VMs and volumes into platform object storage. Pin workloads to DE, NL, or Swiss regions according to residency policy.
VPC networking, Direct Connect, and security services
Virtual Private Cloud isolation, Elastic Load Balancer, VPN, NAT, Enterprise Router, and Direct Connect for high-bandwidth hybrid links. Security stack includes Anti-DDoS, WAF, Cloud Firewall, Host Security Service, and Key Management Service with bring-your-own-key options—useful for regulated network architectures without leaving Telekom-operated regions.
Cloud Container Engine and managed data services
Cloud Container Engine runs Kubernetes-managed clusters and images; companion services cover container instances and registries. Relational Database Service supports MySQL, PostgreSQL, and Microsoft SQL with HA and backup patterns; document, cache (Redis-class), MapReduce, and search services extend the data plane. Service availability differs between DE and NL—check the regional matrix before design freezes.
ModelArts and sovereign AI positioning
ModelArts provides an end-to-end AI development path (data prep, training, deployment) on European infrastructure, with GPU-backed instances for training and inference. Aimed at teams that want model and training-data residency under the same European operator as their IaaS—confirm which AI services exist in your chosen region (several AI offerings are DE-focused).
Twin-core European data centers (DE, NL, CH)
Published regions: twin-core Germany (Biere/Magdeburg), Netherlands (Amsterdam area), and Switzerland (Bern/Zollikofen) for Swiss data residency. Vendor claims geo-redundant twin-core design, high availability targets, and renewable-powered German facilities. Not a global multi-continent footprint—by design for European sovereignty shortlists.
Cloud DICOM archive (VNA-style)
Central archive for studies from in-house modalities and external institutes, with DICOM export so you can take the archive with you. Storage is billed as you grow; long-term statutory retention remains the customer's duty under Unomed's terms.
Zero-footprint browser viewer (OHIF default)
Open studies in the browser with nothing installed on the workstation. OHIF is the default; other viewers can be connected on request. Unomed's GTCs state the standard viewer is not authorised for diagnostic reporting.
PACS inbox with assisted patient matching
Inbound studies land in an inbox; Unomed suggests the matching patient (including fuzzy name matches) and a human confirms. Useful when institutes send studies that do not already carry a clean order from your record.
Share via messenger and guest links
Send studies to colleagues, referrers and patients through Unomed messenger. Recipients without an account get a time-limited guest link; registered users keep the thread in case chat instead of CDs or ad-hoc portals.
Cloud Connector, Radiology Bridge and Medical API
Connect DICOM modalities like a second destination printer, autoroute from an existing institute PACS via Radiology Bridge, or integrate via DICOMweb/Medical API. Keeps on-site PACS investments when you only need outbound routing to Unomed practices.
Overlay on existing practice software
Opens studies from the patient record in supported web-based Swiss practice systems without replacing the PIS. Vendor lists 16+ systems with several official partners; desktop-only software needs a feasibility discussion.
| Assurance & compliance | Open Telekom Cloud | Unomed Cloud PACS |
|---|---|---|
| Independent security / no-logs audit | Not applicable IaaS platform—not a no-logs consumer VPN. Independent assurance is via ISO/SOC/C5-style audits rather than a no-logs report. | Not found No public independent security audit report located on unomed.ch. |
| ISO 27001 | Vendor claimed Vendor certifications page links ISO/IEC 27001 umbrella certificate PDF for download; re-verify serial/date in procurement. | Not found No ISO 27001 certificate or registry entry found on the official site. |
| ISO/IEC 27017 (cloud security) | Vendor claimed Claimed with downloadable attestation PDF on certifications page. | Not listed |
| ISO/IEC 27018 (cloud PII) | Vendor claimed Claimed with downloadable attestation PDF on certifications page. | Not listed |
| SOC 2 / SOC 3 | Vendor claimed SOC 2 Type II (request report); SOC 3 public PDF linked on certifications page. SOC 1 Type II also claimed. | Not found No SOC 2/3 report referenced on public pages reviewed. |
| BSI C5 Type II | Vendor claimed Vendor claims BSI C5:2020 Type II (ISAE 3000); detailed report typically on request via audit-reports download flow. | Not listed |
| TISAX Level 3 | Vendor claimed Vendor states TISAX Level 3 for Germany and Netherlands regions. | Not listed |
| GDPR / EU data protection | Vendor claimed EU operator, EU/CH regions, ISO 27018/27701 claims, DPA language on marketing pages—confirm signed DPA for your entity. | Vendor claimed Swiss FADP (DSG) primary; privacy policy also cites GDPR bases. Confirm DPA/ABV for your use case. |
| US CLOUD Act exposure (indicative) | Partial German Telekom/T-Systems operator, no known US parent of the cloud business, primary hosting on Telekom EU/CH data centers (not AWS/GCP/Azure). Not a legal clearance of zero extraterritorial risk. Historical Huawei tech partnership is separate supply-chain diligence. Not legal advice. | Partial Swiss entity / no known US parent, but AWS (S3 Zurich region, Rekognition Ireland) and Firebase appear in public technical/privacy materials. Not legal advice. |
| Data processing agreement (B2B) | Vendor claimed Vendor GDPR pages state DPA, TOMs, and audit reports available for B2B; obtain current signed pack—not fully self-serve public template verified here. | Vendor claimed GTCs require an Auftragsbearbeitungsvertrag (ABV) when patient data is processed on behalf of the healthcare provider. |
| EU AI Act | Partial Platform offers AI services (ModelArts) that may fall under customer AI Act obligations; OTC itself is infrastructure—not an automated high-risk AI system assessment by EuropeanStack. | Not applicable PACS archive/viewer product; AI is used for assisted patient matching and other suite features, but this entry evaluates the imaging archive, not an AI-centric system. |
| Diagnostic viewer certification | Not listed | Partial Default OHIF viewer explicitly not for diagnosis per GTCs; certified third-party viewers optional. |
| Considerations & known limitations | Open Telekom Cloud | Unomed Cloud PACS |
|---|---|---|
| Historical Huawei technology partnership | Medium Platform launched with Huawei hardware/software partnership; residual stack components may still matter for sensitive public-sector RFPs. T-Systems states independent operation. Review supply-chain docs under NDA. | Not listed |
| Service catalog differs by region | Medium Several services (e.g. ModelArts, bare metal, some database/analytics SKUs) are unavailable in NL or limited to DE. Design against the live regional matrix, not the full marketing list. | Not listed |
| Limited public subprocessor table | Low Unlike some SaaS vendors, a complete public subprocessor inventory was not found on marketing pages. Request DPA annex and subcontractor list before high-assurance processing. | Not listed |
| Smaller global ecosystem than AWS/Azure/GCP | Low Expect fewer regions, fewer proprietary PaaS services, and a smaller marketplace than US hyperscalers. Migration tools and partner ecosystem exist but differ in depth. | Not listed |
| Brand transition OTC → T Cloud Public | Low Documentation, console URLs, and community still mix Open Telekom Cloud and T Cloud Public names. Factor rebrand into runbooks and vendor risk registers. | Not listed |
| US-group cloud components in the data path | Not listed | Medium Even with Swiss HQ and claimed Swiss image hosting, AWS and Firebase endpoints appear in public privacy/CSP materials. Procurement should obtain the named subprocessor annex and assess CLOUD Act residual risk. |
| Default viewer not for diagnosis | Not listed | High If radiologists must report from the included viewer, Unomed alone is the wrong shortlist item unless a certified diagnostic viewer is contracted. |
| No public ISO/SOC or independent audit | Not listed | Medium Assurance currently rests on vendor policies, Swiss entity status and contractual ABV rather than published certificates. |
| Subprocessor list not published | Not listed | Medium Privacy policy says processors can be requested at any time but does not name hosting vendors on the page. Blockers for security questionnaires until the annex is shared. |
When: You need extensive bare-metal catalogs and a very large multi-country EU footprint
Consider: OVHcloud
Different operator (France) and product packaging; compare bare-metal and region maps.
When: You prefer developer-centric European cloud packaging outside the Telekom stack
Consider: Scaleway or Exoscale
Scaleway for FR/NL-oriented developer UX; Exoscale for Swiss multi-zone IaaS + managed K8s.
When: You need global regions, marketplace depth, or proprietary PaaS only hyperscalers provide
Consider: AWS, Microsoft Azure, or Google Cloud Platform
Accept US-parent CLOUD Act exposure and multi-region complexity in exchange for breadth.
When: You want German-market hosting adjacency with a different commercial/product mix
Consider: IONOS
Often compared for German buyers; validate IaaS depth vs OTC enterprise cloud features.
When: You need a European cloud PACS peer outside Switzerland or broader multi-country packaging
Consider: PostDICOM (Netherlands) or other EU cloud PACS vendors
Feature parity is not claimed; compare residency contracts and viewer certification directly.
When: You primarily need raw cloud object storage or hospital-grade imaging services on a hyperscaler
Consider: AWS or Azure health/imaging stacks with your own viewer and compliance design
More infrastructure flexibility; you own more of the clinical workflow glue.
When: You must keep all image data on premises under your sole operational control
Consider: Classic on-prem PACS plus a dedicated sharing portal
Unomed is cloud SaaS with a local connector, not a self-hosted Unomed server product.