- Company sizes or stages where the product is over-provisioned
- Early-stage or very small research groups without ongoing imaging programs may find the platform disproportionate to their technical and budgetary needs.
- Use cases where competitors may be better suited
- If primary needs are broad eClinical operations (EDC, randomization, etc.) and imaging is a secondary requirement, an eClinical suite vendor may be a more appropriate anchor platform.
- Technical procurement gates
- If procurement requires public posting of specific security certifications (for example a publicly available SOC 2 Type II report or ISO 27001 certificate) before engagement, the absence of such public artifacts may impede selection without further vendor engagement.
- Budgetary considerations
- Teams that can accept an open-source repository plus internal engineering resources (for example XNAT combined with internal compute/storage) may prefer that route to reduce subscription costs, accepting higher operational burden.
- Integration and workflow limitations
- If a deployment requires deep, native bi-directional integration with a specific PACS/VNA vendor, buyers should confirm connector maturity and capability during a proof-of-concept.
- Procurement red flags
- Vague contract terms around pricing, compliance scope, and hosting/residency commitments can lead to change-order risk; buyers should require explicit statements in SOWs and contracts.
- Vendor-noted boundaries and publicly observable gaps
- Some functionality is described as outside the default validated scope; customers may need to self-validate custom or non-validated features.
- Roadmap details and feature timing are not consolidated in public-facing materials; buyers should request a release roadmap if timing is material to the engagement.
- Scale and performance documentation
- Vendor positions the product for large-scale archives, but explicit public performance benchmarks, SLAs, and documented limits were not located in the reviewed materials; procurements requiring explicit performance guarantees should request these metrics.
- Security and compliance gaps
- Publicly available audit artifacts (SOC 2 Type II report, ISO certificates) were not found in the materials reviewed. These artifacts are commonly exchanged under NDA during enterprise procurement.
- API and integration constraints
- Vendor documents open REST APIs and language SDKs; explicit API rate limits, quotas, and connector maturity levels were not documented in the sources reviewed and should be validated during technical evaluation.