MedStack
- Company typePrivate
- Founded2015
- HeadquartersToronto, Canada
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What MedStack does
MedStack, operated by Launchit Solutions Inc. and headquartered in Toronto, Canada, provides automated, inheritable compliance and security infrastructure specifically for digital health companies. The platform is composed of two products: MedStack Control, a Docker-based developer platform running on Azure that delivers managed clusters, nodes, databases, storage, and load balancing with built-in security controls mapped to HIPAA, PIPEDA, GDPR, SOC 2, PHIPA, and Cyber Essentials Plus; and Exos by MedStack, a compliance program management module providing pre-built policy templates, procedure workflows, employee HIPAA and cybersecurity training, security questionnaire tools, and audit support. Customers — described as 'hundreds' of digital health companies — inherit up to 75% of required controls through a shared-responsibility model, which MedStack positions as a way to accelerate time-to-market and pass vendor security assessments from payers and providers.
Underlying technology is built on Docker Swarm orchestration with Traefik-managed HTTPS (Let's Encrypt), encrypted overlay networks, and Azure managed databases (PostgreSQL, MySQL). A public REST API (api.medstack.co/v1) exposes management of clusters, services, secrets, configs, volumes, and databases using personal access tokens for authentication. The company serves two primary segments: digital health vendors needing HIPAA-compliant application hosting, and the payers/providers who require those vendors to demonstrate compliance via vendor security assessments.
MedStack operates on a subscription revenue model across both MedStack Control and Exos, with monthly billing and no publicly disclosed pricing tiers (enterprise sales-led with self-serve developer documentation as a complementary motion). The company has raised approximately $5.56M across three funding rounds (2018, 2019, 2021) from investors including TELUS Global Ventures, Blu Venture Investors, and several Canadian and US angels, and maintains an 11–50 employee footprint with operating geographies spanning the US, Canada, and the UK/Europe following its 2024 GDPR-led expansion.
MedStack firmographics
Firmographics- Name
- MedStack
- Legal name
- Launchit Solutions Inc.
- Website
- https://medstack.co
- Company type
- Private
- Founded year
- 2015
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Ownership category
- akta.pro rank
Where MedStack is headquartered
LocationHeadquarters
- HQ city
- Toronto
- HQ country
- Canada
- HQ region
- North America
Offices1 record
Markets served
MedStack business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations
Revenue model
- MedStack Control Subscription: Subscription-based revenue model for the MedStack Control platform which provides compliant application deployment infrastructure. Pricing is likely tiered based on resource usage (nodes, databases, storage, services).
- Exos by MedStack Subscription: Subscription-based revenue model for the Exos compliance management platform which provides policy templates, training, and evidence generation. Offered alongside MedStack Control for comprehensive compliance coverage.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | Pricing details not publicly available |
Go-to-market motion3 records
Distribution channels3 records
Marketing channels7 records
MedStack product offering
Product offeringCore offering
MedStack provides a HIPAA-focused compliance platform for digital health companies, pairing MedStack Control (a Docker-based Azure-hosted developer platform with inheritable security controls for deploying and maintaining compliant digital health applications) with Exos by MedStack (a compliance program management module offering policy templates, procedure builders, employee HIPAA training, and audit evidence generation). The integrated offering enables digital health vendors to inherit a large portion of HIPAA, PIPEDA, PHIPA, GDPR, and SOC 2 controls instead of building compliance programs from scratch.
Product overview
MedStack is a healthcare compliance platform consisting of two main products: MedStack Control (the core developer platform for deploying and maintaining compliant digital health applications) and Exos by MedStack (the compliance management module). MedStack Control provides Docker-based infrastructure with built-in security controls that allow organizations to inherit a large portion of HIPAA compliance requirements. Exos by MedStack complements this by providing policy templates, employee training, evidence generation, and procedure management. Together, these products enable digital health companies to automatically meet data privacy and security requirements while reducing the compliance burden through shared responsibility and inheritable controls.
Differentiator
Problem solved
Functional benefit
Brands
- Exos by MedStack: Compliance management platform providing policy templates, procedures, task builders, employee HIPAA privacy training, and evidence generation for digital health companies.
- MedStack Control
Products and services
- MedStack Control MedStack Control is the core developer platform for deploying and maintaining compliant digital health applications, providing Docker container orchestration on Azure with inheritable, managed security controls that allow customer applications to automatically inherit HIPAA, PIPEDA, GDPR, and SOC 2 controls through a shared responsibility model.
- Exos by MedStack Exos by MedStack is a compliance management module providing pre-defined policy templates, customizable procedure builders, employee HIPAA and privacy training programs, asset tracking, and audit evidence generation to help digital health organizations establish and maintain healthcare compliance programs.
Quantifiable outcome
- Up to 75% of HIPAA, PIPEDA, and PHIPA compliance program can be pre-established through inherited controls from MedStack Control and Exos
Companies that use MedStack
Customer profileSegments2 records
Ideal customer profiles2 records
MedStack technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Feature6 records
MedStack partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- Launchit Solutions Inc.coreLaunchit Solutions Inc. is the parent company and registered owner of the MedStack trademark. The company operates MedStack as its primary product offering for healthcare compliance solutions.
Scale indicators1 record
Recent moves6 records
Expansion highlights5 records
MedStack competitors and assessment
Company assessmentDirect peers
- Aptible: Aptible is a direct competitor that provides a HIPAA-compliant cloud platform and compliance management tooling aimed at digital health companies. It overlaps with MedStack on both the managed compliant infrastructure layer and the compliance program management layer, serving the same buyer profile of digital health vendors.
- Datica (formerly Catalyze): Datica historically offered HIPAA-compliant cloud hosting and compliance tooling for digital health applications. It directly competes with MedStack Control and Exos on the combined compliant-infrastructure plus compliance-management positioning for healthcare app developers.
- Cloudticity: Cloudticity builds and manages HIPAA, HITRUST, and other compliant cloud environments on Azure for healthcare organizations. It is a direct competitor to MedStack in compliant Azure-based hosting for digital health and healthcare buyers, though it leans more toward managed services than self-serve SaaS.
Broad incumbents
- Microsoft Azure (for Healthcare): Azure is the underlying infrastructure provider MedStack builds on and competes with at the edges. Azure offers HIPAA-eligible services, HITRUST inheritance, and the Microsoft Cloud for Healthcare industry suite, providing alternative paths for digital health customers to achieve compliance without a specialized layer like MedStack.
- Amazon Web Services (AWS): AWS is a broad incumbent offering HIPAA-eligible services, BAA-backed offerings, and the AWS HealthLake/HITRUST-aligned reference architectures that compete with MedStack's compliance-inheritance value proposition. Many digital health customers evaluate AWS-native compliance tooling directly against MedStack.
- Google Cloud: Google Cloud provides HIPAA-eligible services and Assured Workloads for healthcare compliance, plus a Healthcare Data Engine. It is a broad incumbent alternative for digital health companies evaluating where to host compliant workloads versus using MedStack.
Emerging players
- Vanta: Vanta is a leading automated compliance management platform covering SOC 2, HIPAA, ISO 27001, and other frameworks. It competes with MedStack's Exos module on the compliance management layer, though Vanta is horizontal and MedStack extends into managed infrastructure.
- Drata: Drata is a compliance automation platform supporting SOC 2, HIPAA, ISO 27001, and other frameworks with continuous monitoring and evidence collection. It overlaps directly with Exos on the compliance management side, particularly for HIPAA-bound digital health customers.
- Secureframe: Secureframe provides compliance automation for SOC 2, HIPAA, PCI, ISO 27001, and other frameworks. It competes with Exos on policy templates, evidence generation, and training, especially for healthcare-adjacent SaaS buyers.
- Laika: Laika is a compliance management and certification platform offering policy libraries, vendor management, and audit support for SOC 2, HIPAA, and other frameworks. It is an emerging competitor to MedStack's Exos on the compliance program management workflow.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
MedStack social profiles
Digital presenceMedStack compliance and trust
Trust signalCompliance5 records
MedStack financial estimates
Financial estimateRevenue estimate
Valuation estimate
MedStack leadership team
Management profileNumber of profiles
Profiles2 records
MedStack funding detail
Funding detailFunding overview
Funding rounds4 records
Investors16 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
MedStack M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about MedStack
What does MedStack do?
MedStack provides a HIPAA-focused compliance platform for digital health companies, pairing MedStack Control (a Docker-based Azure-hosted developer platform with inheritable security controls for deploying and maintaining compliant digital health applications) with Exos by MedStack (a compliance program management module offering policy templates, procedure builders, employee HIPAA training, and audit evidence generation). The integrated offering enables digital health vendors to inherit a large portion of HIPAA, PIPEDA, PHIPA, GDPR, and SOC 2 controls instead of building compliance programs from scratch.
Is MedStack a public or private company?
MedStack is a private company. It is classified as venture growth investor backed and is currently operating.
When was MedStack founded?
MedStack was founded in 2015. It employs 11 to 50 people.
Where is MedStack based?
MedStack is headquartered in Toronto, Canada, in the North America region.
How does MedStack make money?
Two revenue lines are on record. MedStack Control Subscription is the primary driver. The others are exos by MedStack Subscription.
Who are MedStack's main competitors?
Direct peers on record are Aptible, Datica (formerly Catalyze) and Cloudticity. Broad incumbents are Microsoft Azure (for Healthcare), Amazon Web Services (AWS) and Google Cloud. Emerging players are Vanta, Drata, Secureframe and Laika.
Does MedStack have an API?
Yes. MedStack Control API is a public REST API for managing cluster services on MedStack Control. It supports managing clusters, nodes, services, databases, storage, webhooks, secrets, configs, and volumes. Authentication uses basic authentication with personal access tokens. The production server endpoint is https://api.medstack.co/v1. Developer documentation is at support.medstack.co/api.