CARDIS
CARDIS is a Slovak cloud information system for residential social care providers. It combines client and health records, staff files, shift planning, catering and stock control, with ChatGPT/OpenAI assistance embedded across several modules.
What is CARDIS?
CARDIS is a cloud information system built specifically for residential social care: social services homes, retirement homes and, from 2026, home care, home nursing and assistive equipment lending. It is a sector application rather than a general-purpose ERP, and it is sold only on the Slovak market.
The system is organised in modules. The client module holds records for residents and applicants, the services they receive, groups by building or floor, contact persons, individual plans and objectives, contracted care acts and care records; its health section covers diagnoses, diets, nursing care plans under MZ SR Act 306/2005, medication using the ŠÚKL codelist, wound care plans and measured values. Around it sit modules for staff (personnel files, documents, requests, training, meeting minutes, internal communication), organisation (assets, contracts, invoices), shifts and attendance including a hardware attendance reader, catering (meal planning, ordering and portioning, menus, allergens and nutritional values), stock, a management module for reports and statistics, settings, an intranet and SOS evacuation lists.
The artificial intelligence layer is declared as running on ChatGPT/OpenAI and is presented as an assistant rather than a decision-maker, with the final judgement always left to the user. Thirteen named uses span four modules: generating care plan objectives and daily plan descriptions, analysing wound photographs, recommending wound care, interpreting measured values, transcribing voice records, drafting care descriptions, proposing contracted acts, checking drug interactions, summarising meeting minutes, generating test questions, optimising rosters and forecasting stock consumption.
Technically it is browser-only, with no client installation, running on dedicated servers on an HTML5, CSS3, PHP, JavaScript, VueJS, AJAX and MariaDB stack. Data is hosted in Czechia, with a primary data centre in Ostrava and a replicated standby site in Brno. Updates are deployed monthly between the 15th and the 25th, normally with under a minute of interruption.
Two companies stand behind it: MAM care a.s. in Bratislava sells and licenses the product in Slovakia, while Chytrá organizace s.r.o. in Czechia develops and solely operates it. The vendor claims more than eight years on the market, over 100 client organisations, 12,000 staff users and 360+ functions.
What it does
- Generate individual care plan objectives from a client's mapping
- Dictate a care record and have it transcribed automatically
- Analyse a wound photograph and obtain an assessment of how it is evolving
- Check a client's medication for drug interactions
- Summarise meeting minutes automatically
- Optimise a staff shift roster
- Forecast stock consumption
When to use CARDIS / When not to
A quick filter to help you decide if CARDIS is the right fit.
When to use CARDIS
- Residential social care facilities and retirement homes in Slovakia that need client records, nursing documentation, rostering, catering and stock in a single system
- Slovak providers who must work to national frameworks such as MPSV-registered services, nursing care plans under MZ SR Act 306/2005 and the ŠÚKL medicines codelist
- Care teams drowning in paperwork who want AI to draft care notes, transcribe spoken records and summarise meeting minutes
- Organisations leaving Cygnus 1, for which a documented migration path recovers roughly 87% of the record data
- Facilities that must evidence who accessed sensitive personal data, thanks to full access logging and a printable GDPR access report
When not to use CARDIS
- Any organisation outside Slovakia: the licence is contractually restricted to Slovak territory, and the Czech market is served under a different brand
- Buyers who need a published price, since no rate card or entry price appears anywhere on the site and everything goes through a bespoke quote
- Teams expecting self-service sign-up, as the demo is not open and requires a client identifier and a verification code
- Developers looking for a public API: no API documentation, endpoint or developer portal is published
- Users who need a native mobile app or a browser other than Chrome, which the vendor's technical specification lists as the only supported one
How to use CARDIS
A typical end-to-end flow, from setup to results.
- Open the quote form, 'Naceniť CARDIS', and enter your organisation's name, company number and contact details
- State the volumes for each module you need: staff, attendance-tracked staff, residential clients for the social and health sections, kitchens, stock locations, equipment sites, field carers and field nurses
- Receive a bespoke quote within 72 hours; modules left blank are excluded from it
- Arrange an online or on-site presentation of the system, offered free and without obligation
- Request access to the demo at demo.cardis.sk, which needs a client identifier and a verification code
- If migrating from Cygnus 1, export the database files yourself in MDB or SQL format and send them at least five working days before training
- Allow about one working day for the one-off import, during which CARDIS cannot be used, then check the result immediately
- Complete the business configuration, since codelists, parameters and procedures are not carried over and must be entered
- Take the first on-site training session, which the vendor provides free of charge
- Work day to day through Google Chrome over HTTPS, with monthly updates applied by the vendor
Pros & Cons
Pros
- Deep sector specialisation, aligned with Slovak frameworks such as MPSV services, MZ SR Act 306/2005 and the ŠÚKL codelist
- AI genuinely distributed across daily work, with thirteen named uses rather than a chatbot bolted on the side
- Unusually detailed and verifiable infrastructure disclosure: named data centres, hardware, replication and monitoring
- Robust backup regime: four times daily, AES-256 encrypted, immutable, 365-day retention, restoration tested weekly
- ISO/IEC 27001:2023 held by the developer, with certificate number, certification body and validity dates published
- Native GDPR traceability, since the system logs who accessed which data and can reproduce it on demand
- Fair commercial terms: updates included in the licence, no disk quota, free first on-site training and a stated commitment not to raise prices annually
Cons
- No public pricing whatsoever: no rate card, no range and no entry price, only a bespoke quote within 72 hours
- The licence is contractually limited to Slovak territory, ruling out any other market
- Nothing is said about how the third-party AI engine handles data, even though the tool processes health records and wound photographs
- No list of subprocessors is published, which is a notable gap for a system holding special category data
- No public API, no native mobile app and no self-service trial
- Only Google Chrome is supported; the technical specification lists Firefox, Safari, Edge and Internet Explorer as unsupported
- The privacy page carries no effective date, no data protection officer and no dedicated GDPR contact address
Pricing & Plans
No price is published on the site, and no permanent free plan is offered. Pricing is handled entirely through a bespoke quote: the buyer completes the 'Naceniť CARDIS' form and receives an offer within 72 hours. The basis of charge is modular and multi-dimensional, combining the number of staff, the number of staff whose attendance is tracked, the number of residential clients for the social and health sections counted separately, the number of kitchens, the number of stock locations at distinct addresses, and the number of equipment sites, field carers and field nurses. Because no amount is disclosed and no single billing unit describes that basis, the starting price, currency and billing unit are left empty rather than estimated. Updates are included in the licence fee, storage is unmetered, the first on-site training session is free, and the vendor states it does not raise the software price every year. Contracts run for an indefinite term with three months' notice, and the vendor's liability is capped at the fees paid over the preceding twelve months.
Data, GDPR & hosting
A consolidated view of how CARDIS handles your data.
GDPR overview
GDPR compliance is stated explicitly. The terms commit the provider to processing personal data in accordance with the GDPR and Slovak Act 18/2018 Z. z., and a dedicated page explains the regulation, data subject rights and record-keeping duties. The vendor positions itself as a processor and signs a data protection agreement with the software contract. Concrete measures are named: enforced password strength, hashed storage, an SQL database with per-user access, complete access logging, and a GDPR tab producing a printable report of which staff reached sensitive and personal data. The Slovak supervisory authority is cited. Three gaps remain: the policy carries no effective date, names no data protection officer and no dedicated GDPR contact address, and never mentions the third-party AI engine.
Who owns the data?
The customer organisation remains the data controller and keeps ownership of its records. The vendor describes itself explicitly as a processor (spracovateľ), acting only on the controller's instructions and within the scope the controller assigns. A separate data protection agreement is signed alongside the software contract. The terms give the customer a right to recover its data in a standard format on request once the contract ends. Nothing on the site claims any licence to reuse customer content for the vendor's own purposes. One gap deserves attention: the AI layer runs on ChatGPT/OpenAI, yet no page declares that third party as a processor or states what data reaches it.
Reuse rights
Customers may use their own records freely: the data belongs to the controller, the vendor processes it only on instruction, and the terms provide for its return in a standard format on request when the contract ends. No permission step is described for a customer wanting to export, reuse or migrate its own records. The restrictions in the terms bear on the software, not on the data: customers may not modify, adapt, translate, merge or create derivative works from the application, may not sublicense it, and may not assign the licence to a third party. The licence itself is non-exclusive and limited to Slovak territory.
Data retention & training
Hosting summary
Data is hosted in Czechia, not in Slovakia. The primary data centre is in Ostrava, operated by České Radiokomunikace, where the developer runs its own half rack secured by a dedicated lock and reachable by only three named people using a smart card and an individual alarm code. The site is guarded and monitored around the clock, linked to a central security desk, the fire service and the police, sits in a non-flood and non-flight zone, and has dual independent power and multiple fibre routes into the NIX and SIX exchanges. Servers are HPE and Lenovo with redundant power and SSD/NVMe in RAID 5 behind a WatchGuard firewall, running Red Hat Enterprise Linux with only ports 80 and 443 exposed. A standby data centre in Brno holds a read-only replica used for exports and emergency recovery. Backups sit on four NAS devices across separate locations. The public IP address independently resolves to the Ostrava operator, corroborating the claim. No broader hosting region is named.
Where CARDIS works
Country-level availability.
Available in
Not available in
Things to keep in mind
Risks and trade-offs to weigh before adopting CARDIS.
- The AI runs on a third-party engine, ChatGPT/OpenAI, that no data protection page names as a processor: what leaves the system, and where it is handled, is undocumented even though the tool holds diagnoses, medication records and wound photographs
- AI suggestions touch clinical ground, drafting care descriptions, interpreting measured values, reading wound photographs and checking drug interactions; the vendor rightly frames them as assistance, but routine acceptance without review could erode the professional judgement these records are supposed to evidence
- No subprocessor list is published, so a customer acting as data controller cannot see the full chain of parties handling residents' special category data
- The company named on the contact page, MAM care a.s., is the Slovak sales representative, while the software is developed and solely operated by Chytrá organizace s.r.o. in Czechia; buyers should be clear which entity carries which obligation
- The structured data embedded in the homepage is unreliable: it carries a placeholder telephone number, an average rating of 4.8 from 100 reviews that appear nowhere on the site, two postal addresses contradicted by the commercial register, a Facebook link that does not resolve and a founding year that matches neither company's registration
- One certificate number, 1225/2024/SC/BI, is described three different ways across the vendor's own material: as ISO/IEC 27001:2023 in the technical specification, as internal standards merely reflecting ISO 27001 principles on the security page, and as a cybersecurity certificate under Czech Act 69/2018 Sb. on the NIS2 page
- Headline figures such as 100+ organisations, 12,000 staff, 17,000 clients and one million euros reported monthly to insurers are vendor claims with no published source, and the homepage's eight years on the market sits alongside almost nine years on the history page
Setup & Integrations
Technical difficulty
Low for the customer's IT, higher for its staff. Nothing is installed: a browser is enough, with Chrome recommended. The vendor carries out implementation and configuration. The real effort is the business setup after migration, since codelists, parameters and procedures are not transferred and must be entered by hand; the vendor warns explicitly against expecting to resume where the previous system stopped. Migration itself requires the customer to export roughly 500 MB of data unaided, delivered five working days ahead, followed by a one-off import lasting about a working day and requiring immediate verification.
Deployment
Integrations
Supported languages
Behind CARDIS
Social
Resources
All the official URLs gathered for verification and reference.
Alternatives
Tools that compete with or complement CARDIS.
Frequently asked questions
Who is CARDIS designed for?
Which AI does CARDIS use?
Does the AI make decisions instead of the carer?
How much does CARDIS cost?
Can I try it before buying?
Where is the data hosted?
What is the backup policy?
Is there an API?
Can I migrate from Cygnus 1?
Is CARDIS available outside Slovakia?
Should you pick CARDIS?
CARDIS is a niche tool that does its niche seriously. Its strength is not the AI badge but the fit with Slovak residential social care: nursing plans under national law, the ŠÚKL medicines codelist, MPSV-registered services, and a client record that carries both the social and the health side of a resident's file. The AI layer is genuinely woven into that work rather than parked beside it, with thirteen named uses that address the real burden in these facilities, which is documentation.
The infrastructure disclosure is unusually candid for a vendor of this size. Named data centres, listed hardware, online replication, four daily encrypted and immutable backups kept for a year, restoration tested weekly, and an ISO/IEC 27001:2023 certificate quoted with its number, its issuing body and its validity dates. Independent resolution of the site's IP address matches the data centre the vendor claims to use.
Two reservations matter. The first is commercial: nothing about the price is public, and the licence is contractually confined to Slovakia, so the tool is simply unavailable to most readers. The second is more substantive. The AI runs on a third-party engine, yet no page of the data protection documentation names that engine as a processor, says what leaves the system, or explains where it is handled, and no subprocessor list is published at all. For a product holding diagnoses, medication records and wound photographs, that silence is the gap worth raising before signing.
Buyers should also note that the commercial entity named on the site was incorporated in February 2025, while the software itself is built and operated by an established Czech developer registered in 2016.
- Choosing a selection results in a full page refresh.
- Opens in a new window.