Infrastructure for regulated work

Built right.
Documented.
Yours.Kapstone Systems

Cloud and on-prem systems for public health, government and research. Built in your environment, documented for audit, then handed to you or run for you.

  • HIPAA
  • NIST 800-53
  • 21 CFR Part 11
  • Azure · AWS · On-prem
Everything we build runs in your environment, from code you keep.
25+ yearsInfrastructure, from data centers to cloud
State healthProduction public health systems on Azure
Audit-readyHIPAA · NIST 800-53 · 21 CFR Part 11
Fixed priceScoped stages, priced up front
What we do

Three practices, one standard

Every system is built from code you keep and documented to the controls your auditors ask about.

01 // PUBLIC HEALTH

Keymaker

Disease surveillance, modernized

  • NBS7 deployed in your Azure tenant
  • CDC DIBBs and eCR Viewer
  • Data modernization roadmaps
Explore public health ›
02 // GOVERNMENT & REGULATED

Hardened Systems

Secure by default, cloud or on-prem

  • Kapstone Hardened Images: AlmaLinux 9 with the DISA STIG profile, FIPS mode and an evidence pack per release
  • Private AI on your own hardware, with human review
  • Secure file transfer, OCR and FHIR application images
Ask about images ›
03 // RESEARCH DATA

Validated Research

REDCap and 21 CFR Part 11

  • REDCap administration across dev, test and production
  • Validated 21 CFR Part 11 environments
  • Server hardening, patching and upgrades
Talk research ›
Start here

Cloud cost & security check

For counties, health departments, tribal programs and districts. Small enough to buy without a full procurement.

Free

Snapshot

A 30-minute review of your cloud environment. You leave with the top three savings and security fixes.

$4,500fixed

Assessment

A full cost and security review with a prioritized fix list. Refunded if we find less than $9,000 in annual savings.

$2,000/mo and up

Retainer

Ongoing cost tuning, security monitoring, patching and a monthly report for leadership.

How it works

Assess. Build. Hand over. Operate.

Each stage is scoped and priced on its own. Take the keys after the build, or keep us on for ongoing support.

STEP 01

Assess

Current systems, gaps, security controls, cost model and plan.

2–4 weeks
STEP 02

Build

Deployed in your environment from code, tested, then cut over.

6–16 weeks
STEP 03

Hand over

Code, runbooks and working sessions until your team can run it.

2 weeks
STEP 04

Operate

Upgrades, monitoring, backup tests, monthly cost and security reports.

Monthly
For procurement officers

Vendor data sheet

Legal entity
Kapstone Systems
UEI / CAGE
Pending registration
NAICS
541512 · 541513 · 541519 · 541511 · 541690
Business size
Small business
Standards
HIPAA · HITRUST CSF · NIST 800-53 / RMF · 21 CFR Part 11
Certifications
Microsoft Azure · AWS SysOps Administrator
Contract types
Fixed price · T&M · Subcontract
Agreements
BAA · MSA · Security addendum
Contact

Tell us what you're running

A 30-minute call covers your current systems and where to start.

hello@kapstone.systems