Unomed Cloud PACS vs Webswing

Comparez Unomed Cloud PACS et Webswing sur les capacités, la juridiction, les garanties et l'adéquation pour les acheteurs européens.

Tous deux listés comme alternatives à: Amazon Web Services (AWS), Microsoft Azure

Logo: Unomed Cloud PACS

Unomed Cloud PACS

Switzerland· Cloud Computing

Needs review

Shortlist for Swiss practices that want a cloud DICOM archive, browser viewing and referrer sharing without replacing their PIS, and that accept a Zurich SaaS vendor with claimed Swiss image hosting. Skip when you need a default CE-marked diagnostic viewer, a fully public subprocessor and audit pack, or a self-hosted PACS you operate yourself. Consider PostDICOM or a classic on-prem PACS plus sharing tool when those constraints dominate.

Swiss-operatedCloud PACS / VNADICOM archiveBrowser viewerPIS overlay
Logo: Webswing

Webswing

Ireland· Cloud Computing

Needs review

Shortlist when you must browser-enable an existing Java Swing/JavaFX/SWT/NetBeans or Oracle Forms estate without a rewrite and can run a self-hosted session tier. Skip when you are building a greenfield web UI only, or when the app depends on video, 3D acceleration, or ultra-low-latency graphics. Consider Citrix/VDI or a hyperscaler cloud desktop when you need generic desktop remoting beyond Java UI toolkits.

EU-operatedSelf-hostedISO 27001 (claimed)No-rewrite Java UIOracle Forms capable
Unomed Cloud PACS vs Webswing: Aperçu
CaractéristiqueLogo: Unomed Cloud PACSUnomed Cloud PACSLogo: WebswingWebswing
Pays d'origineSwitzerlandIreland
CatégorieCloud ComputingCloud Computing
Open sourceNonNon
Auto-hébergéNonOui
SiègeSwitzerlandIreland
Entité légaleUnomed AGWEBSWING LIMITED (Webswing Ltd.), 93 Upper George's Street, Dun Laoghaire, A96 V1K8 Dublin, Ireland
Droit applicableNon indiquéIreland
Maison mère / contrôle USAucune maison mère US connueAucune maison mère US connue
Exposition CLOUD Act (indicative)MoyenFaible
Statut d'hébergement dans l'UEPartielInconnu
Hébergement / résidenceVendor claims primary hosting, databases and DICOM storage in Switzerland. Privacy policy lists identity/liveness processing in EU (Ireland) and speech recognition in EU (Denmark). API CSP references AWS S3 eu-central-2 (Zurich) and AWS Rekognition/Cognito eu-west-1; push via Firebase; website may use Cloudflare WAF cookies and Google Analytics. Named subprocessor list on request only.Product runtime is customer-operated (on-prem, customer cloud, Docker, or Kubernetes). Vendor Client Portal and marketing site use listed processors including Google Ireland, Meta Ireland, LinkedIn Ireland, and The Rocket Science Group LLC (US) for email marketing; those apply to vendor website/portal data, not to self-hosted application sessions.
Résumé

Swiss cloud PACS and vendor-neutral archive for storing, viewing and sharing DICOM medical images in the browser, integrated with existing medical practice workflows.

Self-hosted platform that runs Java Swing, JavaFX, SWT, NetBeans, and Oracle Forms apps in the browser without rewriting them.

Tags
En un coup d'œil: Unomed Cloud PACS vs Webswing
En un coup d'œilLogo: Unomed Cloud PACSUnomed Cloud PACSLogo: WebswingWebswing
HQZurich, SwitzerlandDublin, Ireland
Legal entityUnomed AG (CHE-374.858.885)WEBSWING LIMITED (CRO 564226)
Product typeCloud PACS / VNA SaaSNon indiqué
Self-hostedNo (local connector only)Non indiqué
Default viewerOHIF (not for diagnosis per GTCs)Non indiqué
FoundedNon indiqué2015 (Dublin); product lineage from ~2012
License modelNon indiquéCommercial + SLA (evaluation available); AGPL only ≤20.2
DeploymentNon indiquéSelf-hosted (ZIP, Docker, Kubernetes, cluster)
UI frameworksNon indiquéSwing, JavaFX, SWT, NetBeans, Applets, Oracle Forms
Data residency regionsSwitzerland claimed for DICOM/hosting; some auxiliary processing in EU (IE/DK) per privacy policyNon indiqué
Key capabilities: Unomed Cloud PACS vs Webswing
Key capabilitiesLogo: Unomed Cloud PACSUnomed Cloud PACSLogo: WebswingWebswing
Swiss-operatedOuiOui
Cloud PACS / VNAOuiNon indiqué
DICOM archiveOuiNon indiqué
Browser viewerOuiNon indiqué
PIS overlayOuiNon indiqué
Self-hostedNon indiquéOui
ISO 27001 (claimed)Non indiquéOui
No-rewrite Java UINon indiquéOui
Oracle Forms capableNon indiquéOui

Unomed Cloud PACS

  • Cloud DICOM archive (VNA-style)

    Central archive for studies from in-house modalities and external institutes, with DICOM export so you can take the archive with you. Storage is billed as you grow; long-term statutory retention remains the customer's duty under Unomed's terms.

  • Zero-footprint browser viewer (OHIF default)

    Open studies in the browser with nothing installed on the workstation. OHIF is the default; other viewers can be connected on request. Unomed's GTCs state the standard viewer is not authorised for diagnostic reporting.

  • PACS inbox with assisted patient matching

    Inbound studies land in an inbox; Unomed suggests the matching patient (including fuzzy name matches) and a human confirms. Useful when institutes send studies that do not already carry a clean order from your record.

  • Share via messenger and guest links

    Send studies to colleagues, referrers and patients through Unomed messenger. Recipients without an account get a time-limited guest link; registered users keep the thread in case chat instead of CDs or ad-hoc portals.

  • Cloud Connector, Radiology Bridge and Medical API

    Connect DICOM modalities like a second destination printer, autoroute from an existing institute PACS via Radiology Bridge, or integrate via DICOMweb/Medical API. Keeps on-site PACS investments when you only need outbound routing to Unomed practices.

  • Overlay on existing practice software

    Opens studies from the patient record in supported web-based Swiss practice systems without replacing the PIS. Vendor lists 16+ systems with several official partners; desktop-only software needs a feasibility discussion.

Webswing

  • Browser delivery without rewriting Java UI

    Runs Swing, JavaFX, SWT, NetBeans Platform, Applets, and Oracle Forms in HTML5 browsers over WebSockets with no required source changes. End users need a browser only, not a local JRE or plugin.

  • Customer-controlled self-hosted runtime

    Install from a distribution ZIP or containers on your own servers, VMs, Docker, or Kubernetes. Standalone and Cluster Engine modes cover single-node pilots through multi-node scale-out with admin monitoring.

  • Incremental modernisation beside legacy screens

    Modernisation Framework and JsLink let React, Angular, Vue, Vaadin, or APEX components coexist with Java UI so teams can rewrite modules over time instead of a big-bang cutover.

  • Enterprise auth and session operations

    Pluggable security modules include SAML2, OpenID Connect, Keycloak, LDAP, and custom providers. Admin Console adds session mirror view, recording/playback, logs, and multi-tenant path isolation.

  • Built-in printing, files, and clipboard bridges

    Browser-side printing with preview, isolated upload/download folders, and clipboard integration cover common desktop workflows that break in naive remote-app setups.

Assurance & compliance: Unomed Cloud PACS vs Webswing
Assurance & complianceLogo: Unomed Cloud PACSUnomed Cloud PACSLogo: WebswingWebswing
Independent security / no-logs audit
Not found

No public independent security audit report located on unomed.ch.

On request / NDA

Footer states regular security testing is available upon request; no public independent audit PDF found.

ISO 27001
Not found

No ISO 27001 certificate or registry entry found on the official site.

Vendor claimed

Site footer: Webswing Limited maintains an ISO/IEC 27001-certified ISMS. Independent cert registry entry not verified in this pass.

SOC 2 / SOC 3
Not found

No SOC 2/3 report referenced on public pages reviewed.

Not found

No SOC 2/3 claim found on public site pages reviewed.

GDPR / EU data protection
Vendor claimed

Swiss FADP (DSG) primary; privacy policy also cites GDPR bases. Confirm DPA/ABV for your use case.

Vendor claimed

Privacy policy names WEBSWING LIMITED as Irish controller under GDPR; FAQ states GDPR alignment for company contact data.

US CLOUD Act exposure (indicative)
Partial

Swiss entity / no known US parent, but AWS (S3 Zurich region, Rekognition Ireland) and Firebase appear in public technical/privacy materials. Not legal advice.

Partial

EU entity with no known US parent; self-hosted runtime keeps sessions on customer infra. Vendor website/portal lists US-group processor The Rocket Science Group LLC (email) plus Google/Meta/LinkedIn Ireland entities for analytics/ads. Not legal advice.

Data processing agreement (B2B)
Vendor claimed

GTCs require an Auftragsbearbeitungsvertrag (ABV) when patient data is processed on behalf of the healthcare provider.

Not found

Privacy policy references Art. 28 DPAs with Webswing's own processors; no public customer-facing DPA download found. Request during procurement.

EU AI Act
Not applicable

PACS archive/viewer product; AI is used for assisted patient matching and other suite features, but this entry evaluates the imaging archive, not an AI-centric system.

Not applicable

Core product is application delivery/runtime, not an AI system. Prague research affiliate explores AI; not the catalogued product.

Diagnostic viewer certification
Partial

Default OHIF viewer explicitly not for diagnosis per GTCs; certified third-party viewers optional.

Non indiqué
Considerations & known limitations: Unomed Cloud PACS vs Webswing
Considerations & known limitationsLogo: Unomed Cloud PACSUnomed Cloud PACSLogo: WebswingWebswing
US-group cloud components in the data path
Medium

Even with Swiss HQ and claimed Swiss image hosting, AWS and Firebase endpoints appear in public privacy/CSP materials. Procurement should obtain the named subprocessor annex and assess CLOUD Act residual risk.

Non indiqué
Default viewer not for diagnosis
High

If radiologists must report from the included viewer, Unomed alone is the wrong shortlist item unless a certified diagnostic viewer is contracted.

Non indiqué
No public ISO/SOC or independent audit
Medium

Assurance currently rests on vendor policies, Swiss entity status and contractual ABV rather than published certificates.

Non indiqué
Subprocessor list not published
Medium

Privacy policy says processors can be requested at any time but does not name hosting vendors on the page. Blockers for security questionnaires until the annex is shared.

Non indiqué
Higher per-session server resourcesNon indiqué
Medium

Docs state each browser session needs more server CPU/memory than a native web app. Capacity planning and Cluster Engine matter for large concurrent user counts.

Video, 3D, and low-latency limitsNon indiqué
Medium

Official overview: video not supported, limited sound, no 3D hardware acceleration, poor fit for real-time action games due to rendering latency.

Proprietary licensing since 21.1Non indiqué
Low

Current releases require commercial license + SLA. AGPL/public source stopped after 20.2. Source access for licensed customers is via Client Portal rather than a public repo.

Vendor portal/marketing US-group processorsNon indiqué
Low

Privacy policy lists The Rocket Science Group LLC and major ad/analytics vendors for website/portal data. Irrelevant to on-prem session pixels, but relevant if you put sensitive personal data only into vendor portals.

ISO 27001 not independently verified hereNon indiqué
Low

Vendor claims ISO/IEC 27001-certified ISMS on the site footer. Ask for the current certificate and scope before treating it as verified.

Adéquation

Unomed Cloud PACS

Best fit when

  • Swiss medical or dental practices that want cloud DICOM archive and sharing without an on-site PACS project
  • Teams that must open imaging from an existing web-based practice system rather than a second patient search
  • Institutes that need to autoroute studies to referring practices while keeping an existing PACS (Radiology Bridge)
  • Buyers who prioritise a Swiss contracting entity and vendor-claimed Swiss image residency under the FADP
  • Workflows that share studies with referrers or patients via links instead of CDs or one-off portals

Poor fit when

  • Organisations that require the included viewer to be a certified diagnostic/reporting workstation out of the box
  • Buyers that need a published named subprocessor list and independent ISO/SOC evidence before first sales call
  • Teams seeking a fully self-hosted open-source PACS they operate themselves
  • Hospitals needing a full RIS/PACS suite beyond practice-oriented cloud archive and sharing

Consider instead when

  • When: You need a European cloud PACS peer outside Switzerland or broader multi-country packaging

    Consider: PostDICOM (Netherlands) or other EU cloud PACS vendors

    Feature parity is not claimed; compare residency contracts and viewer certification directly.

  • When: You primarily need raw cloud object storage or hospital-grade imaging services on a hyperscaler

    Consider: AWS or Azure health/imaging stacks with your own viewer and compliance design

    More infrastructure flexibility; you own more of the clinical workflow glue.

  • When: You must keep all image data on premises under your sole operational control

    Consider: Classic on-prem PACS plus a dedicated sharing portal

    Unomed is cloud SaaS with a local connector, not a self-hosted Unomed server product.

Webswing

Best fit when

  • Enterprises and ISVs with production Swing, JavaFX, SWT, NetBeans, or Oracle Forms applications that must become browser-accessible without a rewrite
  • Teams that can operate a self-hosted Webswing tier (on-prem, VM, Docker, or Kubernetes) and size CPU/memory per concurrent session
  • Organisations planning incremental UI modernisation (React/Angular/Vue/APEX) while keeping proven Java screens online
  • Buyers who want Irish/EU contracting (WEBSWING LIMITED) and customer-controlled residency for application sessions
  • Public-sector or regulated estates retiring endpoint Java installs or reducing Citrix/VDI dependency for Forms/Swing only

Poor fit when

  • Greenfield products with no existing Java desktop or Forms UI to preserve
  • Multimedia, video, 3D-accelerated, or real-time action-game style interfaces (documented limitations)
  • Teams unwilling to run and scale a server-side session farm for interactive users
  • Buyers who require OSI-approved open source for the current release line (proprietary since 21.1)

Consider instead when

  • When: You need generic Windows/Linux desktop remoting rather than Java UI toolkit remoting

    Consider: Citrix / enterprise VDI, or Microsoft Azure Virtual Desktop

    Webswing FAQ positions itself as a narrower alternative to Citrix for Forms/Java estates.

  • When: You are rewriting the UI entirely and have no need to keep Swing/Forms screens running

    Consider: Native web frameworks (React, Angular, Vue) or Oracle APEX without a Webswing bridge

    Webswing's Modernisation Framework is for coexistence during migration, not a mandatory layer for new UIs.

  • When: You want a hyperscaler-managed browser app streaming control plane

    Consider: AWS AppStream / WorkSpaces-class services or Azure cloud desktop offerings

    Trade self-hosted EU software control for managed cloud operations.

Open questions for due diligence

Unomed Cloud PACS

  • Will Unomed provide the current named subprocessor list (hosting, backup, email, SMS, identity) under NDA or in the ABV annex?
  • Which exact Swiss data-centre operators and certifications cover the DICOM archive?
  • Is a CE-marked / certified diagnostic viewer required for your reporting workflow, and which third-party option will Unomed integrate?
  • What SLA, backup/RPO and export support apply to your Cloud PACS tier?

Webswing

  • Will Webswing provide the current ISO 27001 certificate PDF and statement of applicability scope?
  • Is a customer DPA available for Client Portal / support data processing, and which subprocessors apply to licensed customers?
  • Where is portal.webswing.org physically hosted, and are any non-EU regions used for backups?
  • For your Forms/Swing edge cases (WebUtil, local devices, printers), which patterns are supported without code changes?