A practice that loses its clinical system at nine in the morning does not lose an hour. It loses the whole list.
SystmOne, EMIS, Vision, Dentally, Software of Excellence, Carestream — practices choose clinical software for clinical reasons, not IT ones. Our job is everything underneath it: the workstation at the chairside, the network it reaches the server over, the label printer, the card reader, the smartcard login and the scanner that never quite works on Mondays.
Nothing we do should require a practice to change clinical software it is happy with. Where a fault genuinely sits with the clinical supplier, we take it up with their technical team rather than passing the practice manager a reference number.
Health information carries a higher bar under UK GDPR than ordinary business data, and that bar is met through specific, unglamorous controls rather than a policy document in a drawer:
The evidence a Data Security and Protection Toolkit submission asks for — who has access, how devices are encrypted, when a restore was last proven — is far easier to produce when somebody has been keeping that record all year instead of assembling it the week before.
Intra-oral scans, OPGs, CBCT volumes and ultrasound studies are large, they arrive in bursts, and they are clinical records that have to be retained for years. A practice that has added a scanner without revisiting its storage or its backup usually finds out at the worst possible moment.
We size storage and backup around the imaging a practice actually produces, keep the path between the modality and the patient record sensible, and make sure the images are inside the backup rather than sitting on the one machine they were captured on. Hosted desktops often make that simpler, because the images and the record live in the same protected place.
Migrations, server replacements and upgrades are planned around surgery hours and booked clinics. A change that takes a chairside workstation out of use is not a change we make in the middle of a session, and we would rather move a job than explain a cancelled appointment. That is the same managed support and cyber security approach we take everywhere — it just matters more when patients are in the building.