Industries & sectors – Infrastructure for telemedicine providers · ISO 27001 & BSI C5

Telemedicine: real-time capable and verifiable

Video consultation, teleconsultation and remote monitoring place three very different demands – on one infrastructure that carries all three: real time like a video service, data protection like a patient record, evidence for every sales conversation.

centron Console · telemedicine platform
eu-de · Hallstadt Data Centre
Sessions
128 parallel
Latency
stable
Metrics
S3 scales
VID Video consultation · peak at 9 am
● Scaled
CON Teleconsultation · image data audit-proof
● Stored
MON Remote monitoring · time-series ingest
● Running
DOC DPA & TOMs · Trust Center
● Ready
Capacity expandedconsultation window · automatic
  • Certified operations – in Germany: Hallstadt, Nuremberg and Frankfurt am Main.
  • Evidence for your certification – DPA, TOMs and certificates with their scope.
  • Real-time capable – bandwidth and latency for parallel video sessions, individually expandable.
  • Personal 24/7 service – contacts who know your environment.
Why centron

What telemedicine demands from infrastructure

This page addresses providers of telemedicine platforms and services – not practices looking to introduce video consultations.

Headroom for real-time video

Video consultations tolerate no bottlenecks. Sizing with reserve rather than at the limit – load peaks during consultation hours are the norm, not the exception.

Growing measurement data under control

Remote monitoring produces data points continuously over years. S3 Object Storage scales along without you booking volume up front.

Evidence for your certification

Data processing agreement, documentation of technical measures and certificates with scope in the Trust Center: ISO 27001 based on IT-Grundschutz (BSI certificate BSI-IGZ-0773) and BSI C5:2020 Type 1.

Contacts who know the subject

Named contacts who answer questions from your certification process – without a ticket system or time-zone gaps.

Use cases

Three use cases, three load profiles

Telemedicine is not a single use case but three very different ones – every platform serves at least one of them.

Video consultation

Short, plannable sessions with clear peaks in the morning and early evening. What matters is bandwidth, latency and the number of concurrent connections, not the stored data volume. For statutory outpatient care there is one more rule: the video service itself must be certified.

Teleconsultation

A specialist second opinion between practitioners, often with imaging material from radiology or pathology. What counts here is transferring large files and storing them audit-proof. Latency is secondary; storage and traceability are not.

Remote monitoring and remote care

Continuous readings from devices at the patient’s side, around the clock, in small packets. The profile matches a time-series application: constant writes, a growing history, background analysis and alerts on threshold violations.

From risk analysis to operations

Three use cases, three load profiles

Video consultations mainly load network and CPU during clearly defined hours. Teleconsultations move large imaging data, but irregularly. Remote monitoring, by contrast, produces small data points – permanently and growing over years. Anyone serving all three needs compute with reserve and storage that grows without booking volume in advance. That is exactly the combination centron provides with ccloud³ and S3 Object Storage.

Made in GermanyCompany · Data centres · Support
View evidence in the Trust Center
  • Video consultation – bandwidth and low latency
  • Teleconsultation – findings and imaging transferred securely
  • Remote monitoring – measurement data, permanent and growing
  • Germany – processing without third-country transfer
Regulatory landscape

Which evidence is provided by whom

Telemedicine is a real-time service with evidence obligations: every row of this table comes up in sales conversations with practices and clinics. The framework behind NIS2, PDSG and B3S is described by IT security in healthcare.

Requirements and responsibilities
RequirementWho fulfils itWhat centron contributes
Certification of the video service for statutory video consultations under Annex 31b BMV-ÄYou as the provider of the video serviceOperational evidence for your documentation
Listing in the DiGA directory under the DiGAV, if your application is a DiGAYou as the manufacturerDPA, TOM documentation, certificates with their scope
Conformity assessment under the MDR for a medical intended purposeYou with your notified bodyInclusion as a supplier in your supplier management
Conditions for cloud use under § 393 SGB VYour customers verify, you evidenceLocation, domestic establishment, C5 attestation, TOMs
Protection of patient confidentiality under § 203 StGBProfessional secrecy holders, you and centron as participating personsConfidentiality obligations for the personnel involved
Processing under Art. 28 GDPRA chain from your customers via you to centronData processing agreement as sub-processor
Recommended modules

The right centron products

Clinics and medical institutions typically implement IT security with these modules – combinable and extensible at any time.

ccloud³
From
€3.11 / month
Hourly billing
  • Scale as needed
  • German data centres
  • Provisioned in seconds
S3 Object Storage
From
€5.00 / month
Grows with you
  • €0.02 per GB per month
  • Outbound traffic free
  • Object lock available
Managed Kubernetes
From
€29.99 / month
For scaling services
  • Fixed monthly plans
  • Standard control plane free
  • AutoScaler & traffic included
In brief

What infrastructure does telemedicine require?

Telemedicine needs infrastructure that serves real-time demands and growing data volumes at once: compute with reserve for video consultations, storage that grows with measurement data, and evidence for your own certification. The core building blocks are ccloud³ Virtual Machines from €3.11 per month, complemented by S3 Object Storage for measurement data and Managed Kubernetes for scaling services. The infrastructure runs in our own German data centres, certified to ISO 27001 based on IT-Grundschutz (BSI certificate BSI-IGZ-0773) and with an unqualified BSI C5:2020 Type 1 attestation. New accounts receive €200 in starting credit.

Modules and prices
ModulePrice
ccloud³from €3.11 / month
S3 Object Storagefrom €5.00 / month
Managed Kubernetesfrom €29.99 / month
Industries & sectors FAQ

Frequently asked questions

What is telemedicine?

Telemedicine is medical care provided across physical distance using digital communication. Common forms are the video consultation between practitioners and patients, the teleconsultation as a specialist second opinion between practitioners, and remote monitoring, where readings from devices at the patient’s side are transmitted continuously.

How does telemedicine work technically?

Three building blocks interlock: an application through which participants sign in and arrange appointments, a transmission path for video, readings or files – secured via Virtual Private Cloud and Managed Firewall – and data storage for documentation and history. For video consultations the effort lies in real-time transmission, for remote monitoring in long-term storage and analysis.

Does my video service need certification?

For use in statutory outpatient care, yes. Annex 31b to the federal framework agreement for physicians (BMV-Ä) sets the requirements for video service providers, and compliance must be demonstrated. The evidence concerns your service, not the infrastructure beneath it; which requirements apply in detail is a matter for the National Association of Statutory Health Insurance Physicians.

Does centron take over the certification of my telemedicine service?

No. centron provides the infrastructure and the corresponding evidence – certificates with scope, TOM documentation and the data processing agreement in the Trust Center. Certifying your service and meeting the requirements of § 393 SGB V towards your customers remain with you; you can evidence the infrastructure side with our documents.

Does centron meet the requirements of § 393 SGB V?

§ 393 SGB V requires processing in permissible regions, a domestic establishment, appropriate technical and organisational measures and a current C5 attestation; since 1 July 2025 a C5 Type 2 attestation has been envisaged for this. centron meets the location and establishment requirements and holds a BSI C5:2020 Type 1 attestation for the ccloud³ as well as ISO 27001 certification based on IT-Grundschutz issued by the BSI. Its scope covers the operation of ccloud³ and Managed Cloud at the Hallstadt, Nuremberg and Frankfurt am Main sites; it does not cover your operating systems, your application or your content. You can obtain the current status and the documents from the sales team.

Is the performance sufficient for video consultations at peak times?

That depends on the sizing, not the platform. Video consultations create predictable load peaks – in the morning and early evening. Because ccloud³ is billed by the hour, capacity can be scaled up for these windows and reduced afterwards, instead of paying permanently for the peak.

How many concurrent video consultations are possible?

That depends on the resolution, codec and architecture of your application, not on the infrastructure alone. The sensible approach is to name the expected maximum of concurrent sessions and size the environment for it, with reserve for peak times. We work through that calculation with you in advance.

Can readings from remote monitoring be retained permanently?

Yes. Block storage attached to the database suits the live values; S3 Object Storage suits the history. Bear in mind the retention periods for treatment records and the duty to delete the data after expiry, in the backup copies too – see backup for patient data for how this works.

What is centron responsible for, and what remains with us?

centron is responsible for the data centre, platform, network, storage, monitoring and platform backup. Your application, your operating systems, your business processes and your content remain your responsibility. This boundary is expressly recorded in the scope of our ISO 27001 certification and can therefore be evidenced in an audit.

How is patient confidentiality under § 203 StGB preserved?

Anyone supporting professional secrecy holders with data processing is an “other participating person” under § 203(3) StGB; the personnel involved must be bound to confidentiality – implemented at centron through corresponding staff obligations.

Which documents do I receive for certification and audits?

The data processing agreement under Art. 28 GDPR, the documentation of technical and organisational measures under Art. 32 GDPR, and the certificates and the C5 attestation with their stated scope. Everything is available in the Trust Center.

Can I start with a small environment?

Yes. The usual start is a development and a test environment; the production environment follows at market readiness or after certification. You can estimate the costs in advance with the price calculator.

Where is health data processed?

Exclusively in German data centres, with no transfer to third countries. The deployment location for cloud workloads is our own data centre in Hallstadt near Bamberg. centron is a German company with no foreign parent company – a point your customers check regularly.

Get expert advice

Tell us about your project. Our sales team will get back to you within one business day.

The consultation is free of charge and without obligation.