☰

Esaote Group S.p.A.

Cloud and security for medical imaging

A decentralised medical imaging manufacturer pursuing ISO 27001, cloud migration, and multi-site OT convergence

Industry
Medical Imaging & Healthcare IT
Headquarters
Genoa, Italy
Public information as of
January 2026

A4BEE prepared this analysis from publicly available sources. It reflects our own reading of Esaote Group S.p.A.'s published strategy and is not endorsed by, or produced in cooperation with, Esaote Group S.p.A.. Company website

Strategic priorities

Esaote Group is an Italian medical device company specialising in MRI systems, portable ultrasound, and healthcare IT through its Ebit subsidiary. Founded in 1982 as an Ansaldo spin-off, the company employs approximately 1,550 people across manufacturing and R&D sites in Genoa, Florence, Sittard (Netherlands), and Danyang (China). Annual production reaches roughly 2,500 systems; revenues are estimated at €400-500M. The Group is owned by Fiorentina Srl under a Chinese investor. The company's CEO holds a doctorate in computer science and co-founded the PACS software company that became Ebit.

The Fit for 2030 roadmap is the strategic framing for all digital initiatives: ISO 27001 information security certification (launched 2024), cloud-native migration of the SUITESTENSA RIS/PACS platform via the ZEfiRO product, circular economy tracking for the Renaissance refurbished-equipment programme, and harmonisation of four manufacturing sites under a unified OT architecture. A new Software CTO role was created in 2023 to address technology fragmentation across MRI, ultrasound, and healthcare IT divisions.

The operational challenge is distinctive in its geographic and technological complexity: a global spare-parts logistics hub at the Multedo plant in Genoa coordinates repair of MRI and ultrasound systems for all Group devices worldwide, while manufacturing sites in Italy, the Netherlands, and China each run at different levels of OT maturity. The transition to cloud-native healthcare IT is happening simultaneously, requiring GxP-compliant migration of clinical imaging workloads across multiple regulatory jurisdictions.

Challenges we see

  • Digital Integration

    Legacy EMR integration and hospital data silos blocking SUITESTENSA adoption

    Hospital clients operating on constrained capital budgets continue running obsolete EMR systems that lack compatibility with modern AI-based imaging advancements. The SUITESTENSA platform cannot deliver structured outputs that cross institutional boundaries when the surrounding EMR ecosystem is fragmented.

    Where proprietary interfaces dominate the EMR landscape, each new hospital installation requires a custom integration project rather than a repeatable deployment. The SUITESTENSA growth path is constrained by the time and cost of custom integration work unless a standards-based connector layer exists.

  • Operations Manufacturing

    Multi-site OT environments creating fragmented digital maturity

    Production facilities in Genoa (MRI assembly and global logistics hub), Florence (ultrasound probe Centre of Excellence), Sittard (ultrasound production), and Danyang (China-market localisation) each run at different levels of automation maturity, connected through legacy protocols that resist standardisation.

    A real-time inventory picture across the global spare-parts network requires pulling data from OT environments that do not speak the same protocol. Without a harmonisation layer, the Multedo logistics hub cannot see whether a specific MRI magnet is in storage at Danyang or already in the refurbishment queue at Genoa.

  • Supply Chain Manufacturing

    12-month OEM lead times for MRI components driving Renaissance programme complexity

    Global chip shortages and long-lead OEM components — particularly superconducting magnets for MRI — extend purchase lead times up to 12 months. The Renaissance refurbished-equipment programme is a strategic response, but managing complex refurbished inventory with partial history requires higher IT/OT synchronisation than standard manufacturing.

    When a refurbished MRI unit arrives at Multedo without a complete service history, predicting its next failure mode requires correlating repair records, run-hour data from the previous owner, and sensor logs — data that currently sits in disconnected systems.

  • Compliance Regulatory

    Collaborative R&D spanning 1,000+ institutional partners requiring governed data exchange

    Research programmes RAISE and THE involve interdisciplinary collaboration across universities, clinical centres, and the broader innovation ecosystem. The data being exchanged includes sensitive patient imaging information subject to GDPR, while the research output depends on structured data exchange that health information networks cannot easily accommodate.

    Without a governed data exchange infrastructure that applies consistent de-identification and access controls across all 1,000+ research partners, each new collaboration requires a bespoke data-sharing agreement and a custom technical integration — slowing research progress and multiplying the compliance surface.

  • Digital Integration

    Technology fragmentation across MRI, ultrasound, and healthcare IT divisions

    Three separate R&D tracks — MRI systems, ultrasound probes, and healthcare IT through Ebit — each develop and maintain their own software stack under the Software CTO mandate to build a distinctive architectural framework. The risk is duplicated effort, inconsistent user experiences, and an inability to share AI and neural pattern capabilities across divisions.

    The EUR270M investment in Ebit (acquired 2021-2022) will not generate enterprise-level returns if the SUITESTENSA platform, MRI acquisition software, and ultrasound workflow tools remain siloed rather than sharing a common data model and AI services layer.

Opportunities, by urgency and business impact

Each bubble is one opportunity, numbered to match the list below. Further right means it bites sooner; higher means a bigger effect on the business. A bigger bubble means a bigger implementation effort.

Source: A4BEE analysis of public sources

  1. ISO 27001 implementation and cybersecurity hardening

    The 2024 launch of ISO 27001 implementation requires strengthened management of sensitive medical data while the healthcare sector faces increasing cyber threats targeting connected imaging devices and hospital networks.

    Provide cybersecurity auditing and implementation services for the Fit for 2030 roadmap, ensuring digital transition resilience while maintaining international compliance standards and NIS2 obligations for critical healthcare infrastructure.

    • Fit for 2030 roadmap announcement, 2023
    • ISO 27001 launch, Group-wide project 2024

  2. IT/OT convergence across four manufacturing sites

    Production facilities in Genoa, Florence, Netherlands, and China operate with disparate automation levels and legacy infrastructure that prevent unified visibility and real-time optimisation, complicating global spare-parts management.

    Implement an integrated MES and IoT layer to harmonise OT environments using OPC UA connectivity, enabling 100 percent data traceability for the Renaissance refurbishment process and reducing lead times for reconditioned units.

    • Fit for 2030 multi-site manufacturing strategy
    • Multedo plant as global logistics hub and MRI repair centre

  3. Healthcare interoperability and FHIR-based data integration

    Data silos result in duplicative data entry and fail to deliver structured outputs across institutional boundaries, while legacy EMR systems lack capability to capture nuanced diagnostic imaging information for the SUITESTENSA platform.

    Build integration layers using FHIR, HL7, and DICOM-compliant data lakes to connect data from legacy EMRs and imaging hardware, solving the interoperability challenge for SUITESTENSA platform expansion across hospital networks.

    • SUITESTENSA Interactive Structured Reporting capabilities
    • Ebit healthcare IT expansion strategy, 2023-2024

  4. Cloud-native migration of SUITESTENSA RIS/PACS

    Transitioning from on-premise PACS and RIS systems to cloud-native architectures like ZEfiRO requires careful governance to facilitate multi-territorial data sharing while maintaining GxP compliance and audit trail integrity across regulatory jurisdictions.

    Architect and execute the transition to cloud-native infrastructure, enabling information sharing across regional and territorial healthcare networks with containerised microservices, GAMP5 validation, and data residency controls.

    • ZEfiRO cloud-native PACS product description
    • Ebit cloud migration strategy for SUITESTENSA and Pie Medical Imaging

  5. IoT-enabled remote service and predictive maintenance for installed base

    Global Service and repair centres at Multedo require real-time monitoring capabilities to minimise equipment downtime and optimise service technician and spare-parts deployment across the worldwide installed base of MRI and ultrasound systems.

    Develop a remote technical assistance platform using real-time IoT monitoring data from installed ultrasound and MRI devices to enable predictive maintenance, minimise downtime, and provide remote diagnostic capability without requiring on-site presence.

    • Multedo factory as worldwide logistics centre for spare parts and repair centre
    • Installed base of MRI and ultrasound systems requiring service optimisation

What we'd propose

  • Digital Lab

    ISO 27001 ISMS implementation and OT security hardening

    We deploy a complete Information Security Management System aligned with ISO 27001 requirements, covering risk assessment, policy development, control implementation, and ongoing surveillance. IEC 62443 principles are applied to manufacturing OT environments to maintain operational continuity while hardening the attack surface across all production sites.

    • ISMS framework and risk assessment

      ISO 27001 controls deployed across all sites

      Conduct a comprehensive information security risk assessment covering all Group sites and the Ebit healthcare IT environment, then implement the full set of ISO 27001 Annex A controls with particular focus on asset inventory, access management, and incident response procedures.

    • OT security for manufacturing environments

      IEC 62443 protection for MRI and ultrasound production

      Apply IEC 62443 OT security principles to the Genoa, Florence, and Sittard manufacturing environments — network segmentation, device authentication, and anomaly detection — without disrupting the production networks that run on Siemens and Rockwell PLCs.

    • NIS2 compliance programme

      Healthcare sector obligations fulfilled

      Map Esaote's obligations under the EU Network and Information Security Directive (NIS2) as a provider of essential services in the healthcare sector, and implement the required security measures, incident reporting workflows, and supply-chain risk management programme.

    • ISO 27001 certification is achieved within the Fit for 2030 timeline, removing a regulatory risk flag from the Group's digital programme.
    • Manufacturing OT networks are hardened against the attack vectors that have targeted medical device manufacturers globally.
    • NIS2 obligations are met without a separate compliance programme — integrated into the ISMS from day one.

    We've done this before

    See how we do Digital Lab
  • Digital CDMO

    Unified MES and OT harmonisation across four manufacturing sites

    We deploy an integrated MES and IoT platform using OPC UA connectivity to harmonise the Genoa MRI assembly, Florence ultrasound probe, Sittard, and Danyang manufacturing environments under a common Industry 4.0 framework — enabling real-time visibility, circular economy tracking for the Renaissance programme, and paperless shop floor operations.

    • OPC UA cross-site connectivity

      All sites speak one standard

      Implement OPC UA server and client infrastructure across all four manufacturing sites, creating a normalised data exchange layer that abstracts the legacy protocol differences between Genoa (Siemens PLCs), Florence (Rockwell PLCs), and the Danyang site — providing a single interface for the MES layer without replacing existing PLCs.

    • Digital twin for Multedo refurbishment

      Refurbished units tracked from intake to certificate

      Build a digital twin of the Multedo repair and refurbishment process integrated with the global logistics database, enabling full genealogy tracking for each Renaissance unit — from incoming MRI system condition assessment through to the Refurbishment Certificate issued at dispatch.

    • Paperless manufacturing and electronic batch records

      Florence paperless shop floor extended Group-wide

      Extend the Florence paperless shop floor initiative into an enterprise electronic batch record system covering MRI assembly and ultrasound probe production, with GxP-aligned audit trails that satisfy EU MDR traceability requirements for medical device manufacturing.

    • The Multedo logistics hub gains real-time visibility into spare-parts inventory across all sites, reducing the lead time for allocating refurbished components to active service contracts.
    • Renaissance programme compliance is automated — each refurbished unit carries a digital history that satisfies EU MDR traceability requirements without manual record-keeping.
    • Paperless manufacturing at Florence becomes the reference template for all sites, reducing documentation effort and eliminating transcription errors in the assembly record.

    We've done this before

    See how we do Digital CDMO
  • Enterprise AI

    FHIR-based healthcare interoperability for SUITESTENSA expansion

    We build a vendor-agnostic integration layer using FHIR R4, HL7 v2, and DICOM 3.0 standards to eliminate data silos between SUITESTENSA modules, legacy EMR systems, and enterprise imaging workflows — enabling structured data exchange that scales across hospital networks without custom integration per site.

    • FHIR R4 data lake

      Clinical data normalised to open standards

      Implement a unified data platform that normalises data from diverse sources — legacy EMR formats, DICOM imaging archives, SUITESTENSA RIS/PACS, and Pie Medical Imaging — into FHIR-compliant structures, enabling structured data exchange across institutions without proprietary per-connection adapters.

    • Legacy EMR connector library

      Obsolete EMR systems connected without replacement

      Develop and maintain a library of integration adapters for the legacy EMR systems commonly found in Esaote's hospital client base, covering the proprietary formats that block structured data exchange — so SUITESTENSA can connect to existing infrastructure rather than requiring clients to replace their EMR.

    • Interactive structured reporting engine

      Cross-system data aggregation automated

      Extend SUITESTENSA's Interactive Structured Reporting capabilities with automated cross-system data aggregation and clinical history contextualisation, so that a radiologist reviewing an MRI study sees all prior imaging, lab results, and clinical notes from connected institutions in a single view.

    • SUITESTENSA adoption accelerates because each new hospital installation uses a FHIR connector rather than requiring a custom integration project.
    • Radiologists gain a longitudinal patient view across institutional boundaries, improving diagnostic confidence and reducing repeat imaging.
    • Ebit's competitive position against GE, Philips, and Siemens is strengthened by superior interoperability without requiring clients to standardise their entire EMR stack.

    We've done this before

    See how we do Enterprise AI
  • Enterprise AI

    Cloud-native migration of SUITESTENSA RIS/PACS with GAMP5 validation

    We architect and execute the transition of SUITESTENSA RIS/PACS and related healthcare IT systems to cloud-native infrastructure — containerised microservices on Kubernetes, GAMP5-compliant validation, multi-tenant data residency controls, and a disaster recovery architecture that meets 99.9 percent availability targets for critical imaging workloads.

    • Cloud architecture design

      ZEfiRO cloud-native reference architecture implemented

      Design and implement the target cloud architecture for SUITESTENSA migration using containerised microservices on Kubernetes, with high-availability clusters across two availability zones, autoscaling for imaging workload peaks, and a VPN or private-link connection to hospital networks.

    • GAMP5 validation framework

      GxP compliance maintained through migration

      Implement a GAMP5-aligned validation strategy covering the entire migration lifecycle — IQ, OQ, and PQ protocols for the cloud infrastructure, middleware, and SUITESTENSA application layer — ensuring all compliance evidence is generated as a by-product of the migration rather than assembled retrospectively.

    • Multi-tenant data governance

      Regional data residency enforced automatically

      Deploy data residency controls and role-based access policies that enforce jurisdictional data governance requirements — EU data staying in EU regions, China data within China — while enabling authorised cross-border access for research collaborations and multi-site hospital groups.

    • Infrastructure total cost of ownership is reduced by 30 percent through right-sized cloud resource allocation versus on-premise hardware refresh cycles.
    • SUITESTENSA availability reaches 99.9 percent with automated failover, eliminating the planned maintenance windows that currently interrupt clinical workflows.
    • The GAMP5 validation package is completed once and reused for all future releases, eliminating the validation bottleneck that currently slows SUITESTENSA feature releases.

    We've done this before

    See how we do Enterprise AI
  • Digital CDMO

    IoT remote monitoring and predictive maintenance for the global installed base

    We build a remote technical assistance platform integrating real-time IoT monitoring data from installed MRI and ultrasound devices — enabling predictive maintenance algorithms, remote diagnostic capability from the Multedo hub, and AR-guided field service for the global technician team.

    • Installed-base IoT data ingestion

      MRI and ultrasound telemetry collected centrally

      Instrument the installed base of MRI and ultrasound systems with lightweight data collection agents that stream run hours, error logs, magnet thermal data, and probe usage metrics to a centralised analytics platform at Multedo — giving the service team a real-time view of fleet health without requiring on-site presence.

    • Predictive maintenance for MRI systems

      Magnet and cryogen issues detected before they escalate

      Build machine learning models that correlate thermal trends, helium consumption rates, and gradient coil stress patterns to predict superconducting magnet failures and cryogen boil-off events weeks in advance — enabling scheduled interventions that avoid emergency service callouts and patient scan cancellations.

    • AR-guided remote field service

      Expert guidance delivered to any site in real time

      Deploy an assisted-reality workflow layer (RealWear or equivalent) for the field service team, enabling a Multedo specialist to see what the on-site technician sees and provide step-by-step visual guidance through a repair procedure — reducing the need for physical specialist travel and the associated downtime windows.

    • MRI system uptime is improved by reducing unplanned downtime from magnet and cryogen failures — each avoided emergency callout saves an average of two to four days of no scanner availability.
    • Field service efficiency increases because the right parts and the right specialist expertise are dispatched on the first visit, rather than requiring a second trip.
    • The installed-base data collected becomes a product intelligence asset — informing next-generation MRI and ultrasound design decisions with real-world usage evidence.

    We've done this before

    See how we do Digital CDMO

Digital maturity: today and target

Scored out of 100 across six dimensions. The target is what Esaote Group S.p.A.'s own published ambition implies — not a perfect score.

Source: A4BEE analysis of public sources
IT/OT Convergence 45 → 85
Production sites in Genoa, Florence, Sittard, and Danyang each run different OT environments with legacy PLCs and proprietary protocols. The Fit for 2030 roadmap identifies OT harmonisation as a priority, but no unified MES or IoT layer is documented as operational — the gap between the four sites is currently bridged manually, not automatically.
Cloud Readiness 50 → 90
ZEfiRO cloud-native PACS is in market as a product, but the internal SUITESTENSA platform that runs on hospital premises has not yet migrated to cloud infrastructure. GAMP5 validation capability for cloud-hosted healthcare IT is not documented as an internal competency — the Ebit team has historically delivered on-premise deployments.
Cybersecurity Posture 40 → 85
ISO 27001 implementation was launched as a Group-wide project in 2024 but is not yet certified. Manufacturing OT environments were not designed with network security as a primary constraint; the attack surface across four sites and a globally distributed installed base of connected imaging devices is currently larger than the current security controls can manage.
Data Integration 55 → 90
SUITESTENSA generates structured clinical data within its own environment, but data exchange with legacy EMR systems requires custom connectors per installation. A unified FHIR-based integration layer does not yet exist — each new hospital adoption is an integration project rather than a configuration exercise.
Predictive Analytics 35 → 80
Installed-base telemetry from MRI and ultrasound systems is not currently collected or analysed. Service decisions are reactive — a component fails, then a repair is dispatched. The Multedo logistics hub has no predictive visibility into which installed systems are approaching a failure state.
Process Automation 50 → 85
Florence paperless shop floor is the reference case for manufacturing digitisation, but it has not yet been extended to Genoa MRI assembly or the Danyang site. The Multedo refurbishment process still relies on paper-based intake inspection records and manual logistics database updates.

Check this yourself

Our Service Portal has free self-assessments and market comparisons. These are the ones that line up with what we've read above — no sales call required.

Think we've read this right?

Talk to us

Related reading

This is an independent analysis prepared by A4BEE from publicly available information as of January 2026. It reflects A4BEE's own interpretation and opinion, is not affiliated with, endorsed by, or verified with Esaote Group S.p.A., and may be incomplete or inaccurate. All company names and trademarks are the property of their respective owners. To request a correction or removal, contact [email protected].