/ Technology infrastructure for physical operations that cannot stop.
One IT standard for every clinic.
Surya operates the Microsoft platform, the clinic devices and day to day support for multi-site outpatient organizations, 24 hours a day, every day of the year. The tenant comes onto the standard first, then clinics follow one at a time.
/ IT is a physical sport.
The work is in the building. So is the fix.
A clinic does not stop because the ticket queue is short. It stops because the front desk workstation, an exam room workstation, the imaging capture workstation or the label printer is dead and the replacement is two days away.
Surya is built for that: the replacement is already in the building, in the locker, configured to the standard, and the person who needs it can get it without waiting on anyone. The platform, the support line and the custody record run behind it.
Surya does not station people at your sites. The locker, the stock and the swap are the on-site presence; the operations behind them run around the clock from Surya.
- ~40 patient-facing clinics served
- 4 states
- BAA available
- SOC 2 Type II examination complete
/ What is included
Five elements, delivered as one product.
/ 01
Surya Fabric
Approved edge, switching, Wi-Fi, segmentation, connectivity and recovery, operated to one released profile with a tested recovery procedure.
Detail/ 02
Surya Endpoint
Supported identity, endpoint provisioning, Intune configuration, controls, approved applications and protected-data recovery. Autopilot, Intune and Graph are Microsoft functionality; the product is the engineered combination and its verified operation.
Detail/ 03
Surya Standby
Lockers, prepared inventory, authorized issuance, returns, readiness checks and replenishment, so a replacement is prepared before it is needed.
Detail/ 04
Surya Control
Customer-dedicated operations compute in Surya's Research Triangle Park facility, with tested automated actions, continuous configuration verification and an explicit exception path.
Detail/ 05
Surya AI Foundation
Approved Microsoft Copilot and Cowork capabilities, identities, connectors, data boundaries, auditability and consumption controls. Licensing, access, model selection and consumption are separate requirements, not one statement that Copilot is included.
DetailProduct support is included: a defined support path for supported users, plus supported vendor escalation with named owners. Continuous monitoring of the supported state is part of Surya Control and is not the same as staffed 24/7 incident response.
Quantities, released capacity profiles and site options vary within the release envelope. All five elements are required; a required control cannot be removed to reduce price.
/ Site modules
The clinic modules under the physical layer.
Front desk
A supported setup for reception and everyday administrative work.
Specific peripherals and application connections are qualified.
Exam room
Standardized computing for clinicians at the point of care.
EHR workflow and access requirements are confirmed during scoping.
Check-in
Approved computing and peripherals for the check-in workflow.
Surya does not supply a patient intake application.
Imaging workstation
The computing environment supporting an approved imaging workflow.
Vendor compatibility and recovery requirements must be qualified. This is not the clinical imaging device itself.
Printing and labeling
Supported printers and defined configurations for agreed clinic workflows.
Specialty workflows and application dependencies require qualification.
Clinic connectivity
A defined clinic network configuration and agreed support scope.
Carriers, network appliances and failover configurations are scoped case by case.
Final module selection, supported integrations and service scope are confirmed before deployment.
/ When something breaks
Obviously dead: straight to the locker. Might come back: a 30-minute restoration window, then the locker.
Surya provides, installs, owns and operates the locker. The customer purchases and owns the replacement devices inside it. Surya replenishes used inventory the next business day. Backup inventory sits at the Surya RTP distribution center.
/ The boundary
We work up to the port, not past it.
Surya covers the technology that supports the clinical device: the workstation, printer, network connection and supported computing layer. The clinical device itself remains under the authority of the healthcare organization and its medical-equipment vendor unless separately qualified and contracted.
Systems outside the standard are still possible. Clinical applications, production systems, and medical and OT equipment stay with the team or vendor that owns them today.
Surya operates the supported technology foundation. The business, its applications, its AI workflows, access decisions and data authority stay with your organization.
/ Compliance posture
HIPAA-aligned handling, under a signed business associate agreement.
Configuration baselines, access controls, support records, serial-level custody and certified erasure to NIST 800-88 are operated as part of the standard. HIPAA compliance remains an organizational responsibility. Surya provides scoped technology controls, operational practices and evidence that support your program.
/ Security
No patient data in the flow.
The Surya Agent Network works with your Microsoft 365 configuration - policies, device settings, sign-in rules - and nothing else. It does not read patient records, mailboxes, files, or messages, so no PHI enters the flow at any stage. Your operations run on hardware dedicated to your organization in our Research Triangle Park facility, through identities in your own tenant that your administrator can see, audit, and revoke.
How it works, in the detail your security or compliance officer will ask for. →/ One published price
$100 per person per month. $5,000 minimum.
$100 per person per month. $5,000 minimum. One locker per site included. Additional lockers and specialized devices quoted separately.
Additional lockers at a site, Surya Critical devices, Azure compute, site openings and deployment events sit outside the seat price and the monthly minimum.
See the price in full →/ How to start
The tenant is the entry point.
Surya takes the Microsoft platform for the whole organization and brings it to the standard by an agreed date. Then sites come onto the standard one at a time.
Bring the organization onto the platform
Surya takes the Microsoft tenant, brings identity, access, device management and the security baseline to the standard by an agreed date, then operates it.
- Tenant review and the agreed target configuration.
- Identity, access, device management and security baseline brought to the standard.
- 24/7/365 support for end users and the platform from the agreed date.
- Device flows and stocking under one operating record.
Access, licenses and dependencies are confirmed before a date is agreed.
Start here →Open or convert a site
Deploy the agreed standard at a new clinic or plant, or at a site ready for change, and use it to validate the modules, the support path and the recovery method.
- Site and dependency review.
- Supported site modules, deployment and staff readiness.
- Security controls, support handoff and documented recovery.
- The same standard for the sites that follow.
Compatibility, implementation scope and availability are confirmed before a date is agreed.
Start here →These are entry points, not product tiers. Security controls, 24/7/365 support and a documented recovery method belong to the standard from the moment it is in service.
How a scope is qualified.
/ 01
Review the tenant and the sites
The Microsoft platform, site workflows, current technology and application dependencies.
/ 02
Compare against the supported standard
What qualifies for reuse, and what must be replaced, excluded or separately qualified.
/ 03
Confirm dependencies and responsibilities
Identity, network, access, licenses and the named owner for each retained system.
/ 04
Agree the scope and the dates
The platform target, the site modules, the support path and the sequence for the first site.
Qualification is a bounded step before deployment, not a consulting engagement or an audit opinion.
See whether your organization fits the product.
Bring the tenant, the site list and the applications each location depends on.