A doctor working at a desk with a computer and paperwork

IT Support by Industry

IT Support for Medical Practices

General practices, specialists and allied health clinics hold some of the most sensitive information in the country, on systems that have to work at 8:30am whether or not anything broke overnight. We look after both sides of that.

Most businesses can absorb an hour of downtime. A practice cannot. The waiting room fills up regardless, and a patient management system that will not load at the start of a clinic is not an IT inconvenience — it is a day of appointments in question and a receptionist taking the brunt of it.

The information involved raises the stakes again. A practice holds clinical notes, NHI numbers, prescribing history and ACC claims. Under the Health Information Privacy Code 2020 you are directly responsible for keeping that information secure, and a privacy breach involving health information is the kind that will usually meet the serious-harm threshold that requires notification to the Privacy Commissioner.

That combination — very little tolerance for downtime, very high sensitivity of data — is what shapes how we support practices across Auckland and, remotely, the rest of New Zealand.

What matters here

How we help medical practices

Your patient management system comes first

Whether you run Medtech Evolution, Indici, MyPractice or something specific to your specialty, the PMS is the practice and everything else is supporting cast. We care about the boring things: that the server or hosted instance is genuinely backed up and that the backup has been restored recently enough to trust; that the database is not fighting something else for memory; that the vendor's requirements are met before a Windows update goes anywhere near it. We work alongside your PMS vendor rather than pointing at them. We support optometry and ophthalmology practices alongside general practice, so we are used to the systems and the ACC workload that come with it.

Security that matches the obligation

Antivirus on the reception PC is no longer a credible answer. The realistic threats are an email account compromised through a stolen password, and ransomware that encrypts the file share on a Friday afternoon. We deliver MDR built on Bitdefender's platform, watching the machines in the practice and sign-ins to Microsoft 365 together, backed by Bitdefender's 24/7 global security operations centre. That matters because a great many incidents now begin with someone simply signing in as your practice manager, with no malware involved at all.

HISO 10029 and the questions you get asked

Practices working with Health New Zealand | Te Whatu Ora, a PHO or a hospital increasingly have to demonstrate their security posture, usually with reference to HISO 10029:2022, the Health Information Security Framework. There is a part written for organisations your size, HISO 10029.2:2023, and it is the one we work through with you. Cyber insurers ask a similar set of questions in their own language. We go through the questionnaire with you, identify which answers are not currently true, fix those, and then help you answer accurately.

Support that understands a Monday morning

We are a boutique team, not a call centre. When your practice manager rings, they speak to someone who knows the practice, knows which PMS you run, and knows that the start of a clinic is not the time for a long diagnostic conversation. Practice outages are treated as urgent, and if it needs someone on site, we come.

In practice

What we put in place for a practice

  • 24/7 monitored detection and response across devices, identity and Microsoft 365, backed by Bitdefender's SOC
  • Multi-factor authentication rolled out properly, including the shared clinical accounts people forget about
  • Backups that are tested by restoring, and held where ransomware cannot reach them
  • Starter and leaver processes, so a locum's access actually ends when the locum does
  • Security awareness training that fits around clinic hours, not a full day off-site
  • A documented answer to the security questions your PHO and insurer keep asking

Questions

Common questions from medical practices

Do you work with Medtech, Indici and MyPractice?
Yes. We support the infrastructure your PMS runs on — servers, workstations, network, backups and the connection to hosted instances — and we work alongside your PMS vendor on anything inside the application itself. We are not a reseller of any particular PMS, so we have no reason to push you toward one.
Can you help us answer a HISO 10029 or PHO security questionnaire?
Yes. This is work we are set up to do with you. We work through the questionnaire with you, identify the answers that are not currently accurate, fix those, and help you respond properly rather than optimistically. Answering one of these on a hope is worse than answering it honestly.
What happens if we get ransomware?
The honest answer is that it depends entirely on preparation done beforehand. With monitored detection and response, an attack can be stopped while it is still spreading rather than discovered the next morning. With tested, isolated backups, the worst case becomes a restore rather than a negotiation. We put both in place, and we test the restore — an untested backup is a hope, not a plan.
Is our patient data safe in Microsoft 365?
Microsoft 365 is appropriate for health information when it is configured properly, and the Health Information Privacy Code does not prohibit cloud services. What matters is the configuration: multi-factor authentication on every account, sensible sharing defaults, retention that matches your obligations, and monitoring of sign-ins. The default settings of a tenant set up years ago are rarely where you want to be.
How quickly do you respond when a clinic is down?
Practice outages are treated as urgent — we know a full waiting room does not wait. Existing clients reach us directly rather than through a queue, and most issues are dealt with remotely without anyone leaving the practice. We will tell you honestly at the start of an engagement what response times we can commit to, rather than promising numbers we cannot hold.
We are a small practice. Is this overkill?
No. Attackers do not select targets by size; they select by opportunity, and a small practice holding health records is a perfectly attractive target. What changes with size is scale and cost, not whether the controls are needed. We scope to the practice you actually are.

What our clients say

Reviewed by the businesses we look after

I absolutely recommend Anvil Solutions. I have been thrilled with the practical changes and safety measures Anvil have added to my business. Much loved supplier!

Karen

Outstanding services from this company — no matter who you select. These guys jump to at very short notice, are unflappable and can handle just about any IT challenge (and we have sprung a few on them!)

Caroline

Ashley is a very personable, dedicated and professional — it has been a pleasure working with him sorting out our AV requirements and getting it deployed across our 9 offices.

Stu

Ash and his team at Anvil are by far the best IT company we have come across over the years. Great people to work with, they are thorough in getting the best solution to suit your business and quick to take care of things.

Marisa

Super impressed with the knowledgeable and immediate outcome-led service!

David

We have been using Anvil Solutions for a few years now and their customer service, level of understanding of our business and product knowledge is excellent. Ash is always one step ahead of us when it comes to new projects.

Hamish

Ash and his team are always professional and helpful. They find solutions to problems, and give you options where they can. They provide a great service and are on hand to give advice whenever it's needed.

Charlie

Anvil Solutions have provided us with a terrific IT solutions service, and I have total confidence in them. The staff are friendly, helpful and experts in their fields. I highly recommend them. Thanks Anvil.

Kathryn

We have utilised the services of Anvil Solutions to manage our IT needs — MS365 accounts, hardware, network, anti-virus, etc. They provide a timely and efficient response to acute situations, regularly send health check reports and supply advice for actions we may need to take to keep our system up to date and secure.

Joanne

The team at Anvil Solutions are always responsive to my needs as a small business owner and I don't think I could run my business without them. Vinodh is really approachable and doesn't mind when I have to ask silly tech questions!

Raechel

I have used Anvil for 7 years now and cannot rate them highly enough. They are attentive, reliable, courteous, on time, excellent at what they do and cost effective. They are the only IT guys I would consider using.

Paul

Ash, Ronesh and the rest of the team have been looking after my company's IT requirements for nearly 10 years now. They're great at interpreting our needs and coming up with cost-effective solutions and are excellent to deal with.

Tania

Great work! Timely, friendly, and always highly professional. Ash and the Anvil team have been supporting and serving our business for many years now and continue to provide excellent service all round.

Matt

We have been working with Anvil for several years now. They are responsive, efficient, knowledgeable, and are constantly looking to improve themselves and their services. We've gone through a couple of major projects together and they went smoothly without a hitch!

Christan

NoCowboys reviewed businessRead our authenticated ratings for Anvil Solutions on NoCowboys.

Trusted partners

Backed by partners who meet our high standards

Talk to someone who understands medical practices

A straight conversation about what you have, what is actually at risk, and what it would cost to put right. No obligation.