Securing the future of healthcare

Supporting the digital foundations for the future of healthcare

Avi Medical wanted to modernise primary care without compromising on the security of patient data, clinical systems, or the digital services patients rely on every day.

Co-founded by IT specialist Vlad Lata, business economist Christoph Baumeister, and physician Julian Kley, Avi Medical has grown into 19 practices across Germany, supported by an in-house software development team. Its services span GP care, preventive medicine, vaccinations, video consultations, and a patient app that puts scheduling, reminders, and records in one place.

A digital-first approach to primary care

Booking a timely appointment with a trusted family doctor is a frustration most patients know well. Avi Medical was founded in 2020 to close this gap, combining modern primary care with the kind of digital experience patients now expect from every other part of their lives.

To deliver that experience, Avi Medical runs a sophisticated technology stack: central cloud infrastructure, in-house developed applications, and devices distributed across every practice. Securing this was non-negotiable.

Why cybersecurity is critical to business health

Patient data, health records, and financial information all flow through Avi Medical's platform. So does the availability of appointment scheduling and digital services patients depend on. Any disruption is felt immediately by clinicians, by practices, and by patients.

Thorsten Spieker, Director of Engineering at Avi Medical, oversees the technology foundation, including the central cloud infrastructure and all endpoints across headquarters and the practices. With high public footfall through every site, securing devices and identities effectively was a top priority.

"A pen test alone to identify all the threats would have cost us as much as our annual cost for Eye’s all-round service."
Thorsten Spieker
Director of Engineering

The dilemma: build or buy?

Spieker weighed two options. Building an internal security team would, in theory, give Avi Medical complete control but the headcount, recruitment, and 24/7 shift coverage required made it impractical for an organisation of Avi's size.

The alternative was a managed partner. The bar was high: the service had to match what a dedicated internal team would deliver, including round-the-clock detection and response, something that is rare to find at the right price point.

Seeking an external supplier was a smart alternative to building an internal security team. Unlike other external suppliers, Eye Security checked all the boxes: 24/7 monitoring, the strictest data compliance, and round-the-clock support.

A seamless onboarding journey

Eye Security's onboarding process gave Avi Medical the time and clarity it needed.

"There are only positive things to report, the whole process was well explained and we got all the time we needed. Overall, we worked together perfectly."
Thorsten Spieker
Director of Engineering

A comprehensive review of identified threats at the end of the test period gave Spieker the assurance that the platform was working as promised without the cost of a standalone penetration test.

With Eye Security on their side, Avi Medical can keep innovating and providing a holistic healthcare experience, knowing their patients’ data is in safe hands.

Freedom to innovate

The potential of digitalisation in healthcare is vast. Avi Medical is unlocking it through AI-driven services: smarter appointment scheduling, automated check-up reminders, video consultations, digital billing, and secure data exchange between providers, all designed to make care more efficient for patients and practices alike.

With Eye Security as their cybersecurity partner, Avi Medical can focus on its core mission, knowing their technology and patient data are safe.