Home ／ Industries ／ Healthcare
Healthcare (clinics / dental practices / pharmacies)Remote access designed
for patient-data environments.
Electronic health records, appointment systems, billing — off-site access is growing while incidents involving VPN device vulnerabilities continue to be reported. ForceLink connects off-site users to only the systems they need, and is designed to limit the exposure points that make those incidents possible.
"We cannot go down, and we cannot leak."
Ransomware that takes down electronic health records directly affects patient care.
No bandwidth to keep up with VPN appliance vulnerabilities and updates for off-site access.
Hard to know the full scope of maintenance-vendor remote connections.
Trying to keep pace with measures such as two-factor authentication called for in the guidelines.
From off-site, only
the systems that are needed.
You define "who connects to which in-clinic system." Even after the VPN tunnel is up, the full in-clinic LAN is not opened — only the permitted destinations are reachable (feature: internal resource and route control).
- Permit each user only the destinations they need — appointment system, billing server, etc.
- The admin console is not permanently exposed to the internet, reducing the attack surface
- The cloud relay is isolated per clinic — your network does not mix with other organizations
- Key-based connections. With the standard Windows app, private keys are generated and stored on the device only
* Illustrative example. Off-site access is scoped to only the systems that need to be reachable.
Operated in a domestic data center.
The cloud relay runs in a domestic (Japan) data center — not overseas — making it straightforward to know where data resides. The service is operated by Forcenet Co., Ltd., a Japanese company.
Designed with consideration for the
MHLW guidelines, 6th edition.
The MHLW security guidelines for medical information systems (Japan), 6th edition, emphasize management-level involvement and addressing vulnerabilities in network devices such as VPN appliances. ForceLink is designed with those principles in mind, scoping off-site connections to the minimum necessary range.
* Regarding two-factor authentication, which the guidelines emphasize: ForceLink does not currently support multi-factor authentication (MFA). If two-factor authentication or MFA is a requirement, the service may not meet that requirement on its own. Whether a deployment meets the guidelines is determined by the overall operational practices of each healthcare organization; this service alone does not constitute compliance. Please contact us to discuss specific requirements.
Good fit
- Want to connect to in-clinic Windows PCs securely from off-site
- Want to restrict which systems are reachable from off-site
- No dedicated IT staff — want to delegate the complex setup
- Want to know the total cost before starting
May not be the right fit
- Two-factor authentication / MFA is a hard requirement (currently not available)
- Primary devices are Mac or smartphones
- Already running a large-scale zero-trust infrastructure
A flat fee — no waiting for a quote.
¥0 initial fee. ForceLink BOX, cloud relay, and initial setup all included. Priced by user tier (monthly or annual plan). No per-user add-on charges. Know the total cost before you start.
Common questions from healthcare facilities.
Can a clinic with no dedicated IT staff deploy ForceLink?
Yes. Forcenet handles the complex parts — cloud setup and initial ForceLink BOX configuration. The clinic places the ForceLink BOX, then distributes invitation codes to users.
Is it acceptable to access electronic health records and appointment or billing systems from off-site?
Internal resource and route control lets you scope off-site connections to only the systems that are needed. The full in-clinic LAN is not opened, the admin console is not permanently exposed to the internet, and the cloud relay runs in a domestic (Japan) data center. We do not promise absolute security.
Does ForceLink address the MHLW security guidelines for medical information systems, 6th edition?
ForceLink is designed with consideration for the key principles in those guidelines (Japan) — management-level involvement, addressing vulnerabilities in network devices such as VPN appliances, and minimizing access scope. Whether a deployment meets the guidelines is determined by the overall operational practices of each healthcare organization; this service alone does not constitute compliance. Regarding two-factor authentication, which the guidelines emphasize: MFA is currently under consideration and not yet available in ForceLink. If MFA is a requirement, the service may not meet that requirement on its own — please consult us before starting.
Does ForceLink support multi-factor authentication (MFA) or Mac?
The standard client is a dedicated Windows app; connections are key-based. MFA is currently under consideration (not yet available). Mac and smartphone access is handled on a case-by-case basis. If two-factor authentication or MFA is a hard requirement, please consult us before starting.
We will propose the right fit for your facility.
Tell us about the systems you use and the roles involved, and we will walk you through an access-control design. Estimates are free.