Trust & security

Genomic data demands the highest bar.

Genomic data is permanent, familial and predictive — a breach affects relatives who never consented. Security isn’t a feature here; it’s the architecture.

Standards & complianceGDPRDPDPHIPAA-readyISO 27001SOC 2GA4GH
Why it’s different

Not like other data.

Permanent

You can reset a password. You can’t reset a genome — so protection has to last a lifetime.

Familial

Your genome implicates your relatives. Consent and governance must account for people not in the room.

Predictive

It reveals future risk, not just present state — raising the stakes for how it’s stored and used.

Security architecture

Zero-trust, encrypted everywhere.

Engineered in from the first commit — least privilege by default, encryption in transit and at rest, and a full audit trail on every case.

Zero-trust access

Least-privilege, role-based access with strong authentication on every service.

Encryption everywhere

In transit and at rest, with managed keys and secrets isolation.

Immutable audit

Every access and assertion is logged and versioned, per case, for years.

Data residency

Cloud-agnostic deployment keeps data in-region for sovereign requirements.

Secure SDLC

Versioned knowledge bases, reviewed changes, and reproducible pipelines.

Isolation by design

Tenant and environment isolation limits blast radius and cross-exposure.

Compliance & standards

Aligned to the frameworks buyers require.

Data protection
GDPR (UK/EU) and India’s DPDP Act — lawful basis, consent, data-subject rights and breach processes.
Health information
HIPAA-ready controls for handling protected health information in applicable deployments.
Information security
Working to ISO 27001 and SOC 2 control frameworks for the platform and organisation.
Genomic interoperability
HL7 FHIR Genomics and GA4GH standards for secure exchange and reporting.
Clinical classification
Transparent ACMG/AMP and CPIC criteria engines — no opaque black boxes.

Some certifications are in progress as the platform matures toward regulated clinical use; current status available under NDA.

Responsible AI

Intelligence you can defend.

Explainable

Evidence-linked outputs, never ungrounded generation.

Human oversight

A qualified reviewer signs off every clinical assertion.

Auditable

Versioned knowledge means a result is reproducible later.

Fairness-aware

Attention to representation and bias across populations.

Get started

Talk to us about security.

We share architecture detail, control mappings and current certification status under NDA.