Healthcare IT services

A SMART view
of your practice’s IT.

From everyday support to long-term planning, SMART brings the services behind your practice into five clear areas. Explore what each covers and how it supports your work.

Explore our services

The vendors named below are examples of our experience. If your practice uses another system, we’re happy to discuss how we can help. Logos identify the vendors and products mentioned; they do not imply partnership, certification, or endorsement, and all marks remain the property of their respective owners.

Support

Everyday IT & Practice Systems

8 services

Keep the workday moving.

A failed sign-in, an unresponsive workstation, or a scanner that stops sending documents can interrupt an entire appointment. Aldwell provides remote and on-site IT support for medical practices, including the technology around your EHR, Microsoft 365, and business phones.

Computers & Workstations

Workstation setup, performance problems, and everyday troubleshooting.

When a computer is slow, an application keeps crashing, or a replacement device needs to be ready for clinic, Aldwell can take care of the setup and troubleshooting. We check the computer, software, and connected devices to find the cause. New workstations are prepared with the applications and access each staff member needs before they begin using them.

Microsoft 365, Email & Teams

Email delivery, collaboration, and shared-file troubleshooting.

Missing email, a shared mailbox that will not open, or files that stop syncing can quickly become a practice-wide interruption. Our Microsoft 365 work covers Outlook and Exchange Online troubleshooting, account administration, Teams configuration, and shared content in SharePoint and OneDrive. For ongoing management, that also means keeping permissions and settings aligned with how your practice uses the platform.

Accounts, Permissions & Shared Files

Sign-ins and permissions that match each person’s role.

As staff join the practice or change roles, their access needs to change with them. We set up accounts, resolve sign-in problems, and adjust permissions for applications and shared folders. That includes Microsoft Entra ID, which manages sign-ins and access to Microsoft 365 and connected applications. Your practice decides who should have access; we make the approved changes and keep a record that can be checked later.

EHR Access & Troubleshooting

Troubleshooting access to clinical and practice management systems.

We support the technology around your electronic health record (EHR), with extensive experience in Epic and Allscripts environments. When clinicians cannot sign in, a session disconnects, or an application works on one computer but not another, we investigate the workstation, connection, browser, and access settings. If the issue needs the EHR vendor’s attention, we share our findings and follow up with them on your behalf.

Printers & Scanners

Printing, scanning, and getting documents where they need to go.

A stalled print queue or a scanner that cannot reach its destination can hold up reception and clinical staff alike. We troubleshoot printer connections, drivers, scan-to-email, and shared-folder settings, with experience across equipment from Sharp, Lexmark, HP, and other manufacturers. When a fault needs the equipment supplier’s attention, we coordinate with them and test the connection to your systems once the repair is complete.

Business Phone Systems

Business calling, extensions, voicemail, and call routing.

Calls should reach the right person, whether they come through the main number, a direct extension, or the after-hours menu. Our business phone experience includes Microsoft Teams Phone, Dialpad, and 8x8. We configure call routing and voicemail, troubleshoot desk phones and calling apps, and investigate dropped calls or poor audio. If the issue involves your carrier or phone provider, we work with them to resolve it and check the result with your staff.

New-Hire Setup & Departures

Prepare for arrivals and close out access when someone leaves.

A new hire should know where to sign in and have the equipment needed for the job. Before their start date, we coordinate accounts, approved permissions, and workstation setup with your practice. Departures follow a planned process for disabling access, collecting or reassigning devices, and transferring mailboxes or work files when leadership authorizes it.

Technology Vendor Coordination

Technical follow-through across your EHR, internet, phone, and software vendors.

Some problems sit between suppliers: the EHR vendor points to the network, while the internet provider says the connection is healthy. We gather the diagnostic information, work with the relevant vendors, and track the next action. Your office manager has a clear point of contact rather than having to translate technical findings from one support desk to another.

Manage

Infrastructure, Networks & Cloud

7 services

Look after the systems behind the scenes.

Servers, networks, and cloud services connect nearly every part of a practice. Keeping them dependable takes routine maintenance and someone who can work through problems when they arise. Our infrastructure work spans individual offices, multi-location groups, and cloud environments, including Azure and AWS.

Servers & Virtualization

Physical and virtual infrastructure for applications and shared data.

Aldwell administers physical and virtual servers, including VMware environments and systems running Windows Server or Linux. Routine work includes configuration, updates, and making sure applications have enough memory, processing power, and storage. If a server or virtual machine becomes unstable, we investigate the fault and the applications affected, then work through the changes needed to restore reliable operation.

Networks, Wireless & Firewalls

Switching, routing, wireless, and firewall expertise.

Our network specialties include equipment from Cisco, Palo Alto Networks, SonicWall, Dell, Aruba, Juniper, and Ubiquiti. The work ranges from switch and firewall configuration to wireless coverage and connection troubleshooting. That might mean finding why an exam room loses Wi-Fi, separating guest traffic from practice systems, or correcting a firewall rule that is blocking an application. We start with the network you have and what you need it to do.

Microsoft Azure & AWS

Ongoing administration of hosted applications and infrastructure.

Cloud-hosted applications still need attention to access, networking, performance, and cost. Our cloud infrastructure experience includes Microsoft Azure and Amazon Web Services (AWS), along with the connections between hosted systems and your offices. We troubleshoot application and network problems, review resource use, and maintain the settings those services depend on. If a bill rises unexpectedly or a hosted system slows down, we can investigate what changed.

Secure Remote Access

Reliable connections for authorized work away from the office.

Our remote access experience includes Cisco and Palo Alto Networks environments, from VPN configuration to troubleshooting failed connections and interrupted sessions. A virtual private network (VPN) provides a protected connection to practice resources over the internet. The setup needs to account for who is connecting, from which devices, and to which systems, along with authentication and access restrictions appropriate to the work.

Storage, Capacity & Performance

Find what is slowing systems down and plan for growth.

Slow file access can come from several causes: limited storage space, an overloaded server, or an application using more resources than expected. We find where the slowdown is happening and explain the options for fixing it. A review also looks at likely growth, so you can decide whether a configuration change, added capacity, or replacement equipment is the sensible next step.

Monitoring, Patching & Updates

System health checks and scheduled maintenance with follow-through.

Monitoring gives us a way to spot developing faults before someone calls about them. We review alerts from the systems we manage, investigate failures, and arrange maintenance when it is needed. Patching includes scheduling updates around practice hours, checking that they installed successfully, and following up when they did not.

Multi-Location Connectivity

Link offices to the applications and resources they share.

Connecting offices requires a plan for how applications and data will move between them. Our experience spans site-to-site VPNs, MPLS private networks, dedicated point-to-point circuits, and software-defined wide area networks (SD-WAN). We have particular depth with Silver Peak and HPE Aruba Networking EdgeConnect SD-WAN, including configuration and troubleshooting. SD-WAN can manage traffic across multiple connections; the right design depends on your locations, applications, and available circuits.

Assure

Cybersecurity & Business Continuity

8 services

Protect the practice. Prepare for disruption.

Protecting a practice means watching for threats, securing access, and knowing how to recover. These services address different parts of that work, from a suspicious email to a server outage that affects an entire location.

Endpoint Detection & Response (EDR)

Endpoint protection and managed threat investigation.

Endpoint detection and response (EDR) watches activity on computers and servers for signs of an attack. Managed detection and response (MDR) adds a security service to investigate and act on threats. Our experience includes Huntress and Blackpoint Cyber. Aldwell can deploy and manage the agreed protection, work through alerts with the security provider, and coordinate actions such as isolating an affected computer.

Email, Identity & Access Protection

Reduce exposure to stolen accounts and malicious email.

A stolen password can give an attacker a way into email and other practice systems. Multifactor authentication (MFA), sign-in policies, email filtering, and appropriate access controls reduce that exposure. We configure and review those protections together, addressing issues such as overly broad permissions or weak account recovery settings. For Microsoft 365 and Entra ID, we use Maester to test security settings against established baselines and identify gaps that need attention.

Backup & Disaster Recovery

File restoration, system recovery, replication, and failover.

Recovering a deleted file and restoring an entire practice system are different jobs. Our backup and disaster recovery experience includes Acronis, Veeam, Druva, and Azure Site Recovery. We plan backup coverage, retention, replication, and recovery around the systems you use. Azure Site Recovery supports workload replication and failover; backup tools preserve recoverable copies. Together, the selected approach should reflect how much downtime and data loss your practice can tolerate.

Security Awareness & Phishing Defense

Training staff to recognize threats and handle information responsibly.

Staff need to recognize suspicious requests and know how to report them. Our experience includes KnowBe4 for security awareness and phishing training, and Eagle Associates for healthcare compliance training. We help organize the training, track participation, and connect it to everyday situations such as an unexpected sign-in prompt or a request for patient information. Phishing exercises can show where further guidance would be useful.

Vulnerability Review & Remediation

Prioritize security weaknesses and carry out the fixes.

A vulnerability report can contain more findings than a practice can address at once. We sort through issues such as missing patches, exposed services, and unsafe settings to identify what needs attention first. Then we carry out the agreed fixes and check the results. Anything still outstanding stays on the action list, with a clear explanation of the risk and the next step.

Business Continuity Planning

Keep essential work moving when a connection or system is unavailable.

If the internet goes down during appointments, what still works, and who makes the next decision? Business continuity planning connects technology recovery to the way your practice operates. We identify critical dependencies, alternate ways to work, contact responsibilities, and the order in which systems need to return, alongside the people responsible for clinical and administrative workflows.

Incident Response Readiness

Prepare the technical response before an incident creates urgency.

A suspected account compromise or ransomware alert leaves little time to decide who should do what. Before that happens, we work with your leadership and relevant outside specialists to document who to call, how to contain affected systems, and what information to preserve. The plan gives staff a reporting path and gives those responding a set of steps to follow.

Backup Verification & Recovery Testing

Restore selected data and systems, then document what happened.

A successful backup notification does not demonstrate that an application can be brought back into service. Recovery testing checks actual restoration of agreed files, servers, or workloads and the dependencies needed to use them. Results show what worked, what took longer than expected, and what needs correcting in the backup configuration or recovery instructions.

Responsible

Oversight, Compliance, & Governance

7 services

Make informed decisions about your technology.

Technology decisions carry responsibilities beyond the IT department. Leadership needs to know where the risks are, what is being done about them, and what to budget for next. Aldwell brings the technical detail into those conversations and keeps the supporting records organized.

HIPAA-Aware Technical Safeguards

IT safeguards that support your practice’s HIPAA program.

Access controls, audit logging, and protection of electronic patient information need to work in the systems staff use every day. Aldwell implements and reviews these technical safeguards alongside your practice’s HIPAA policies and compliance responsibilities. We check how the controls are configured, document the findings, and work with you on changes where there are gaps.

Policies, Documentation & Evidence

Useful IT procedures and records for leadership and reviewers.

When an insurer or compliance reviewer asks how a system is protected, the answer should be supported by current records. We document configurations, responsibilities, and IT procedures, and organize evidence of the relevant controls. Clear system documentation also makes routine support and staff transitions easier: the next person can understand the environment without reconstructing it from memory.

IT Risk Reviews & Remediation Planning

Turn technical findings into decisions, owners, and next steps.

Which risk needs attention now, and which can be addressed through the next budget cycle? An IT risk review looks at what could go wrong, the systems affected, and the cost and effort of reducing that risk. We discuss the findings with leadership and agree on an action plan, including who is responsible for each item and when to revisit it.

Access & Permission Audits

Review existing access, including privileged and unused accounts.

Permissions tend to grow as employees change roles, applications are added, and vendors come and go. Periodic access reviews compare the accounts and privileges in place with what your practice currently authorizes. Unused accounts, unnecessary administrator rights, and outdated shared-file permissions can then be corrected, with approvals and changes recorded for later review.

Vendor, Asset & License Oversight

Keep track of equipment, subscriptions, and renewals.

Knowing what the practice owns and pays for makes renewal and replacement decisions easier. Asset and license oversight brings together equipment records, software subscriptions, support dates, and vendor contacts. It can reveal unused licenses, unsupported devices, or a service whose ownership is unclear before a renewal or failure forces a rushed decision.

Technology Budgets & Lifecycle Planning

A technology roadmap tied to cost, condition, and practice plans.

Replacing every computer at once may be expensive; postponing every replacement creates its own problems. Technology planning weighs equipment age, software support, capacity, and your practice’s direction. We develop a budget and sequence of improvements so leadership can plan spending, understand the tradeoffs, and prepare for changes such as a new location or application.

Fractional CIO/CISO & Strategic Advisory

Fractional technology and security leadership for your practice.

Some decisions need an experienced technology advisor at the table: an acquisition, a major vendor contract, a security concern, or a multiyear budget. Aldwell offers fractional chief information officer (CIO) and chief information security officer (CISO) guidance, tailored to the role you need. We use CISO Assistant to keep risk assessments, compliance records, and follow-up actions organized. Strategic advice, leadership reporting, and regular governance discussions can be included alongside the technical work.

Transform

Projects & Modernization

7 services

Move forward with a plan.

Changing an EHR platform, opening an office, or moving systems to the cloud involves more than installing equipment. The work starts with understanding what depends on what, then planning the transition around appointments, staff, and the vendors involved.

EHR Migrations & Platform Moves

Prepare the surrounding technology for a clinical platform change.

An EHR change can affect nearly every workstation in the practice. We plan the supporting technology and coordinate with your chosen EHR vendor, drawing on extensive experience with environments such as Epic and Allscripts. Preparation includes checking device and connection requirements, arranging access, and testing with your staff before the changeover. The details of the move depend on the platform and how your practice uses it.

New Locations & Office Relocations

IT planning for medical office relocations and new practices.

Aldwell’s team has completed dozens of office moves and new-location projects. We know how much of the schedule depends on details such as an internet circuit arriving on time or phone numbers transferring correctly. For a medical office move, we coordinate the network, wireless, phones, workstations, and clinical application access with your carriers and vendors, then test the setup before the location begins seeing patients.

Cloud Migrations & Modernization

From application assessment through changeover and support.

Moving a server to the cloud changes how it is accessed, protected, backed up, and paid for. We start by reviewing the applications and deciding what the destination needs to support. Our migration experience includes Microsoft Azure and Amazon Web Services (AWS). The work covers data transfer, accounts, network access, and testing, with a planned changeover and support as staff begin using the new setup.

Network & Infrastructure Upgrades

Server, storage, switching, wireless, and firewall upgrades.

Adding exam rooms, replacing a server, or improving wireless coverage can affect systems elsewhere in the practice. We check those connections before choosing equipment and planning the installation. An upgrade may build on what you already have or replace part of it. Compatibility checks, testing, and changeover planning help keep the work coordinated across applications and locations.

Hardware & Phone-System Refreshes

Coordinate equipment replacement from selection through staff handover.

Replacing equipment means bringing the useful settings and familiar ways of working with it. We prepare the new computers or phones, transfer approved data and settings, and test applications or call routing before staff take over. Larger replacements can be done in stages so your practice can keep working while the rollout proceeds.

Microsoft 365 Tenant Projects

Microsoft 365 migrations, consolidation, and organizational changes.

A Microsoft 365 tenant is the environment that holds your organization’s accounts, email, and collaboration services. When practices merge, separate, or move from another platform, those resources need a coordinated transition. Tenant projects cover identities, mailboxes, domains, and shared content, with permission planning and testing to address the details that can otherwise interrupt staff after a move.

Data & System Integrations

Connect applications, databases, and reporting workflows.

Repeatedly entering the same information into separate systems takes time and creates opportunities for errors. Aldwell builds data and system integrations using application programming interfaces (APIs), databases, and reporting connections. The work starts with what information should move and who may access it, then addresses mapping, error handling, testing, and ongoing maintenance of the connection.

Talk with our team

Start with what your practice needs.

Tell us what is happening, what you are planning, or where you need another set of eyes. We will help you decide which services make sense and how to get started.