Unlimited projects.
One flat rate.
Enterprise-grade REDCap infrastructure for nonprofits, public health agencies, and academic institutions — hosted in our HIPAA and PCI-compliant New Mexico data center, without the per-project price tag.
Up and running
in under a month.
We handle everything from license guidance to go-live. Your team keeps full control of REDCap itself — we manage what's underneath it.
What we manage.
What you control.
This division keeps your organization fully compliant with Vanderbilt's REDCap license terms.
- Rocky Mountain data center or cloud (your choice)
- SSL certificate & domain configuration
- Automated daily backups
- Uptime monitoring & incident response
- OS & middleware security patching
- HIPAA-compliant environment configuration
- Business Associate Agreement (BAA)
- REDCap consortium license (with Vanderbilt)
- REDCap installation & configuration
- User account management
- Project creation & instrument design
- Data entry, export & analysis
- REDCap version upgrade execution
- Day-to-day REDCap administration
Flat rate.
Unlimited projects.
No per-project fees. No surprise invoices. Annual contracts available at 15% off.
- ▸HIPAA-compliant New Mexico data center
- ▸SSL & domain configuration
- ▸Daily automated backups
- ▸Uptime monitoring & alerts
- ▸Quarterly managed updates
- ▸BAA included
- ▸Email support · 48hr SLA
- ▸Unlimited REDCap projects
- ▸Everything in Community, plus:
- ▸Dedicated virtual server
- ▸Daily + off-site backup copy
- ▸Updates on your timeline
- ▸HIPAA compliance documentation
- ▸Email + phone · 24hr SLA
- ▸Annual infrastructure review
- ▸Unlimited REDCap projects
- ▸Everything in Standard, plus:
- ▸Dedicated HA infrastructure + failover
- ▸Disaster recovery environment
- ▸Full compliance documentation suite
- ▸Dedicated account contact
- ▸4-hour support SLA
- ▸FISMA-ready architecture
- ▸Unlimited REDCap projects
Built by people who live
and breathe REDCap.
Kapstone Systems exists because the organizations doing the most important research — community nonprofits, tribal health programs, public health departments, university research teams — are the ones most likely to be priced out of proper REDCap infrastructure.
We've been deploying REDCap for 5 years. We've built instruments, migrated data, run trainings, and managed environments across every institution type in the consortium. We know the Vanderbilt license process, the IRB documentation requirements, the grant line item language, and the exact questions your IT director is going to ask.
"We keep the lights on so you can focus on the research."
Kapstone Systems provides the infrastructure layer — the server, the backups, the SSL, the compliance documentation — while your team stays in full control of REDCap itself. Your data is yours. We never touch it. And with our dedicated servers housed in a HIPAA and PCI-compliant, solar-powered New Mexico data center, your data stays physically secure and geographically resilient — no shared public cloud required unless you prefer it.
Built in the
Rocky Mountains.
Your REDCap data doesn't have to live in a shared public cloud. We colocate our servers in a HIPAA and PCI-compliant facility in New Mexico — solar-powered, triple-redundant, and engineered to match the big cloud providers on speed and reliability.
Most managed hosting services simply resell AWS or Azure capacity. Kapstone Systems is different. We colocate our own dedicated servers in a purpose-built New Mexico data center — giving us direct control over hardware, network connectivity, and compliance posture in a way that cloud-only providers cannot match.
The facility runs on solar power and is engineered for enterprise-grade resilience: triple-redundant BGP networking across multiple fiber providers, UPS power conditioning, dual on-site generators, and biometric physical security. It holds both HIPAA and PCI compliance, and is monitored and staffed around the clock.
For research institutions handling Protected Health Information or sensitive public health records, knowing exactly where your data lives — and the security posture of that facility — matters. Our infrastructure is built to those standards from the ground up, and we're happy to walk any prospective client through our controls documentation.
- Dedicated servers — not shared cloud tenancy
- Biometric & IP-based physical security
- Triple-redundant BGP · 1Gb/s port
- UPS + dual generator + solar power
- HIPAA & PCI compliant facility
- On-site + off-site backup available
- AWS GovCloud available for federal clients
- Azure FedRAMP-authorized regions
- Google Cloud Platform (GCP) available
- Existing cloud credits honored
- Same Kapstone management layer
- BAA included regardless of platform
*Additional cloud hosting costs apply.
Common questions
about REDCap hosting.
Everything you need to know before getting started.
Do I need a REDCap license to use Kapstone Systems?
Yes — your organization needs a free REDCap consortium license directly from Vanderbilt University. This is required by Vanderbilt's terms and ensures your team retains full control of the REDCap software. The good news: the license is completely free for nonprofits, government agencies, and academic institutions. We guide every client through the application process as part of our onboarding — most organizations are approved within a few days.
How is Kapstone Systems different from REDCap Cloud?
REDCap Cloud charges approximately $1,000 per project per month — so an institution running 5 active studies pays $5,000/month. Kapstone Systems charges a flat monthly rate regardless of how many projects you run. Our Agency plan at $3,000/month covers unlimited projects. We're purpose-built for the nonprofit, academic, and public health segment that REDCap Cloud prices out, and our New Mexico data center gives you physical infrastructure control that a pure cloud provider cannot offer.
Is Kapstone Systems HIPAA compliant?
Yes. All environments are hosted in a HIPAA and PCI-compliant New Mexico data center with biometric physical security, redundant power, triple-redundant BGP networking, and 24/7 on-site monitoring. A Business Associate Agreement (BAA) is included with every plan at no additional cost. We're happy to provide our full controls documentation to any prospective client.
How long does it take to get a REDCap environment running?
Most clients are fully up and running within one month of signing. That includes walking through the Vanderbilt consortium license application, provisioning your infrastructure, configuring SSL and backups, and handing off a ready-to-use environment URL. The Vanderbilt license step is typically the longest part — we streamline it with a step-by-step guide developed from years of doing exactly this.
Can you host REDCap on AWS, Azure, or Google Cloud?
Yes. While we recommend our own New Mexico data center for most clients, we can deploy and fully manage your REDCap infrastructure on AWS (including GovCloud), Microsoft Azure (including FedRAMP-authorized regions), or Google Cloud Platform. This is useful if your organization has an existing cloud commitment, grant compliance requirements, or a preference for a specific provider. Additional cloud hosting costs apply.
Do you offer REDCap consulting services beyond hosting?
Yes — with over 5 years of hands-on REDCap experience, we offer a full range of professional services including instrument and form design, REDCap version upgrades, staff training workshops, data migration from paper or legacy systems, and HIPAA/IRB compliance documentation. These are scoped and priced separately from hosting and can be combined with any plan.
Let's talk about
your environment.
Tell us about your organization and we'll put together a proposal within 2 business days.
We respond to every inquiry within one business day. If you'd prefer a direct conversation, reach us at the contact below.
No hard sell. We'll review your situation, ask a few follow-up questions if needed, and send a tailored proposal. If Kapstone isn't the right fit, we'll tell you that too — and point you in the right direction.