Security Robots for MVZ Clinics: Protection from €3,500

MVZ networks are growing faster than their security structures. 8 to 40 properties per operator are standard [source required], architecturally mixed, often without dedicated Werkschutz. This text is directed at management. It describes where autonomous patrols supplement a Pförtnerposten, where they do not, and what costs are realistic.

MVZ Clinic Security Robots: Why Now

Consolidation in the outpatient sector has operational consequences. One operator takes over GP practices, specialist centres, and psychiatric outpatient clinics. The sites are scattered, many in suburban locations with parking decks and attached pharmacies. A central Werkschutz structure exists in the rarest of cases.

The nightly risk picture is concrete. Drug procurement at consultation buildings holding BtM stocks, vandalism at pharmacy annexes, assaults in the emergency outpatient unit after the main gate closes, theft of ultrasound equipment and laptops. Incident numbers have risen since 2022 across almost every network we support.

The personnel market compounds the situation. The BDSW documents persistent shortages and rising hourly rates in the security industry (BDSW Zahlen, Daten, Fakten). A 24/7 shift roster across three secondary sites is often simply no longer procurable, neither at market rates nor at a premium.

A QR-2 patrols a complete MVZ outdoor area from €3,500/month. Delivery in 48 hours, no CapEx, no balance-sheet capitalisation. Model details: Robotics-as-a-Service without CapEx.

One limitation upfront. The robot does not replace de-escalating staff during daytime operations. It covers the window between 20:00 and 06:00 and takes over unguarded secondary sites. Operators who cut costs at the daytime reception build risks that become expensive later.

Next step: review Wachschutz costs in direct comparison.

Concrete Risk Scenarios in MVZ Operations

Four scenarios appear in almost every site inspection.

First: parking deck assaults on late-shift MFAs between 21:00 and 23:00. The route from the staff exit to the employee car park is frequently unlit and without video coverage. BDSW industry data confirm the trend (BDSW Branche). Consequence: resignations, recruitment costs, absences.

Second: break-ins at consultation buildings to access BtM stocks. Average material damage in our case files runs between €8,000 and €24,000, excluding operational downtime on the following day. [internal source or external reference required] Insurers are increasingly responding with deductibles from €5,000 [source required].

Third: property damage to photovoltaic systems and emergency generators on flat roofs. These losses are often not noticed for days because no one inspects the roof. At diesel generators, fuel theft adds to the exposure.

Fourth: harassment of patients in the waiting area of the psychiatric outpatient clinic after the main gate closes. The threshold for aggressive behaviour drops noticeably after 22:00. Nursing and medical staff carry the risk without backup.

A fifth scenario applies only to networks connected to an acute-care hospital: drone overflights above helicopter landing pads. The QR-3 configuration with extended detection is relevant here, not the standard model.

Sensor Configuration and Deployment Profile: QR-2 for MVZ Sites

The QR-2 is designed for the outdoor areas of small and medium-sized properties. The thermal camera detects persons at 0 lux up to 80 metres distance. That covers typical MVZ car parks and delivery zones. The RGB camera with person detection classifies into three categories: patient, staff, unknown. Audio output is configurable in DE/EN bilingual mode; additional languages are optional.

Patrol routes are mapped to the specific building layout. Standard checkpoints are the main entrance, emergency outpatient unit, pharmacy annex, waste area, transformer station, and staff car park. Routes are randomised so that no predictable patrol pattern emerges.

Live connection runs into a certified alarm receiving centre under DIN EN 50518. Escalation to police or a mobile intervention service follows an agreed protocol. Reaction time from alarm to human operator viewing the stream is under 12 seconds [internal evidence or DIN EN 50518 reference required].

Data protection: no facial recognition, no biometric identification. Processing under Art. 6(1)(f) GDPR with documented legitimate interest. A template for the works agreement with the MAV (at church-affiliated operators) or the Betriebsrat (at private operators) is available. The technical reference is EN ISO 13482.

More on the platform: QR-2 outdoor patrol with thermal sensor.

Cost Comparison: Wachschutz vs. Robot at the MVZ

The figures are direct. A 24/7 Pförtnerposten at a single MVZ site costs €15,000 to €25,000/month including shift supplements, holiday and sick-leave cover, depending on collective bargaining region and provider [source required]. At church-affiliated operators with AVR alignment, the lower bound is somewhat higher.

The QR-2 under the RaaS model costs €3,500/month. Minimum term 24 months. Included in the price: maintenance, software updates, replacement unit on defect within 24 hours, NSL connection, and monthly reporting.

For networks, a hybrid setup performs best. One human Posten at the main site with the emergency outpatient unit, QR-2 at three to five secondary sites. Total savings against continuous human Streife typically run between 40 and 55 percent [source or methodology description required], with higher coverage of peripheral sites.

The contract model is monthly OpEx. No capitalisation, no investment approval by the shareholders' meeting required. Treatment as a service rather than fixed assets is particularly relevant for MVZ GmbHs under private equity ownership. There, EBITDA bridges and multiples shape the capital structure.

Next step: detailed comparison at Wachschutz costs in direct comparison.

Hospital Connection: KRITIS Relevance

The distinction matters here. An MVZ as such does not fall under the BSI-KritisV. The thresholds of that regulation apply to hospitals with at least 30,000 fully inpatient cases per year (BSI-KritisV). Pure outpatient structures do not reach that threshold.

Once the MVZ is connected to a KRITIS-obligated hospital, the situation changes. The KRITIS-Dachgesetz introduces physical protection obligations for operators of critical facilities from 2026 onwards, including hospitals (BT-Drs. 20/9262). Operators running an MVZ and a clinic on a shared campus must align the security concepts. Otherwise gaps arise at the transition points: connecting buildings, shared parking decks, and delivery zones.

The NIS-2 Directive adds to the physical layer through its risk management obligation (Directive 2022/2555). It addresses primarily cyber risks but requires integrated risk management that includes physical measures.

Practical recommendation: the MVZ patrol is documented as a formal component of the hospital security concept. The contract, route plan, and NSL connection belong in the annex to the BSI evidence submission under § 8a BSIG.

Further reading: KRITIS obligations for hospitals and NIS-2 and the healthcare sector.

Implementation in 14 Days: Process

The standard process is proven. Deviations arise mainly from building records and Wi-Fi issues, rarely from legal questions.

Days 1 to 3: site inspection by the Quarero operations team. Route capture, Wi-Fi coverage measurement along the entire patrol path, definition of the charging station position. Where Wi-Fi gaps exist, LTE failover is configured.

Days 4 to 7: mapping and route simulation in the digital twin. Coordination with the MAV or Betriebsrat and the data protection officer. Notices under Art. 13 GDPR are printed and placed at access points. A complaints contact is designated.

Days 8 to 10: delivery of the QR-2, commissioning, NSL connection, test patrols with shift management. Shift management receives a 90-minute briefing on audio announcements, override function, and escalation thresholds.

Days 11 to 14: trial operation with fine-tuning of audio announcements. Escalation chains are coordinated with the local police station. One meeting with the responsible precinct commander is generally sufficient.

From day 15: regular operation. Monthly reporting with incident statistics, quarterly review with management. Route adjustments are possible at any time; a route change goes live within 48 hours.

A comparable setup is documented in the perimeter protection at industrial parks as a reference build.

Responsibility of MVZ Management

The legal position is clearer than many managing directors assume. § 43 GmbHG obliges the standard of care of a prudent business person (GmbHG § 43). That includes protecting staff and patients, also outside core working hours. Managers who have documented recurring incidents and taken no action risk personal liability.

The Arbeitsschutzgesetz specifies the obligation. § 3 ArbSchG requires a Gefährdungsbeurteilung that explicitly covers route risks and assault hazards (ArbSchG § 3). If those points are missing, the assessment is incomplete and vulnerable to challenge in Berufsgenossenschaft inspections.

On the insurance side, operators and reinsurers expect documented technical protection measures from 2026 onwards, particularly for night-time operating hours and unguarded secondary sites [source required]. Some property insurers already require this in the 2025 renewal round.

Where an MVZ is connected to a KRITIS clinic, MVZ management bears proportional liability for gaps in the physical protection concept of the network. The separation between outpatient and inpatient does not provide relief here, because the overall campus system is assessed as a whole.

Recommended documentation: contract with the service provider, route plan, NSL connection with escalation matrix, incident logs, annual review in the management report. These five documents suffice for supervisory board, auditors, and BSI inspectors.

Next Steps for MVZ Networks

The entry process is structured. Four steps over six months are recommended.

Stocktake. Which sites are unguarded at night? Where have documented incidents, assaults, or property damage occurred in the past 24 months? Which sites are in areas with elevated police statistics? This data usually exists already; it is simply not consolidated.

Prioritisation by risk. Emergency outpatient units and psychiatric sites first, because incident probability is highest there. Pure consultation centres next. Pharmacy annexes in parallel, because expected material damage is high.

Pilot at one site over three months. KPI agreement with management: number of incidents, NSL reaction times, staff satisfaction in the late shift. A short survey before and after the pilot produces reliable data.

On success, rollout at network level. Framework contract with tiered conditions from five units, with option rights for additional sites without renegotiation. That accelerates later integrations after acquisitions.

60 minutes are available for a structured initial conversation with operations and legal, no sales presentation: Initial meeting with the Quarero operations team.