← Back to Capabilities

Private Secure Deployment

On-premises and private-cloud deployment that meets medical data security standards and compliance requirements, keeping data within the hospital and fully controllable.

Overview

Medical data security is a non-negotiable red line. Simo provides complete private deployment solutions for all AI products and research services, ensuring medical data never leaves the hospital network boundary while meeting MLPS 2.0 (Multi-Level Protection Scheme) and data-security regulations — letting institutions use AI with confidence.

Core Capabilities

1. Flexible Deployment Options

  • On-premises servers: single-node and clustered GPU deployment
  • Private cloud: compatible with mainstream general-purpose and Xinchuang (domestic) cloud platforms
  • Hybrid: core data processed locally, non-sensitive modules in the cloud
  • Containerized delivery: standardized Docker/K8s deployment for rapid rollout

2. Five-Layer Security Protection

  • Network security layer: dedicated-network isolation, firewall policies, VPN secure channels
  • Data security layer: encryption in transit (TLS 1.3), encryption at rest (AES-256), data de-identification
  • Application security layer: identity authentication (LDAP/AD), fine-grained permission control, operation audit logs
  • Access control layer: role-based access control (RBAC), multi-factor authentication (MFA)
  • Monitoring & audit layer: real-time security monitoring, anomaly detection, compliance audit reports

3. MLPS Compliance Support

  • MLPS 2.0 Level 3 technical-requirement implementation
  • Guidance on security-management policies and operating procedures
  • Cooperation with MLPS assessment and remediation support
  • Annual security inspections and risk assessments

4. Data Sovereignty Guarantee

  • 100% of data stored in-hospital, with full control over upload and download
  • Model-training data never leaves the hospital, supporting on-site incremental training
  • Data lifecycle management: collection → storage → use → archiving → destruction
  • Patient-privacy protection: compliant with the Personal Information Protection Law and the Data Security Law

Security Commitments

  • Data stays in-hospital: all computation and storage completed on-site
  • MLPS compliance: assistance with assessment and filing
  • Security auditing: complete operation logs and security audit reports
  • Emergency response: 4-hour response to security incidents

Technical Advantages

Dimension Public-cloud approach Simo Private Deployment
Data storage Cloud storage 100% in-hospital storage
Network transfer Requires internet Works on the hospital LAN
Compliance burden Item-by-item audit Naturally meets MLPS requirements
Security control Depends on cloud vendor Fully controlled by the hospital

Want to learn more? See the FAQ or Contact Us for detailed deployment options.

← Back to Capabilities