Welcome to Genomcore's Trust Center
Genomcore's Trust Center provides transparent access to our security practices, certifications, compliance documentation, and data privacy policies.
Security by design
Our platform is built with multiple layers of protection to safeguard your biomedical data at every level.
Data Security
- AES-256 encryption at rest
- TLS 1.3 in transit
- Automated daily backups
- Data erasure on request
- Key management via AWS KMS
Access Control
- Role-based access control (RBAC)
- Multi-factor authentication (MFA)
- Granular permission policies
- Session management
- Privileged access monitoring
Application Security
- SAST and DAST code analysis
- Dependency vulnerability scanning
- Annual third-party penetration testing
- Secure SDLC practices
- Responsible disclosure program
Infrastructure
- AWS EU (Frankfurt) — ISO 27001 certified
- Network isolation with VPC
- Container orchestration with auto-scaling
- Infrastructure as Code (IaC)
- Separate production environments
Network Security
- Web Application Firewall (WAF)
- DDoS protection
- Intrusion detection system (IDS)
- Traffic filtering and monitoring
- TLS-only communications
Corporate Security
- Security awareness training
- Background checks for employees
- Endpoint detection and response (EDR)
- Disk encryption on all devices
- Incident response plan
Compliance & Certifications
Every certification is audited by an independent certification body. Download the official certificates below.
ISO 27001
Download Certificate
ISO 27017
Download Certificate
ISO 27018
Download Certificate
ENS High Level
Download CertificateDocument Library
Access our public policies and request confidential security documentation.
Public Documents
Publicly available policies and legal documents.
Request Security Documentation
Fill out the form below and our security team will review your request and respond within 2 business days.
Subprocessors
Third-party services that process data on behalf of Genomcore. This list is kept up to date and customers are notified of changes.
| Service | Purpose | Data Location |
|---|---|---|
| AWS | Cloud infrastructure & data hosting | EU |
| Azure | Cloud infrastructure & hosting | EU |
| Google Cloud Platform | Backup & disaster recovery | EU |
| Sendgrid | Transactional email delivery | EU |
| Hubspot | CRM & marketing automation | EU |
| Google Workspaces | Productivity & collaboration tools | EU |
| Docusign | Electronic signature management | EU |
| ProBackup | Database backup management | EU |
| Elastic | Application monitoring & logging | EU |
| Railway | Application hosting & deployment | EU |
| Cloudflare | CDN, DNS & security | EU |
| Pipedrive | Sales CRM | EU |
| Netsuite | ERP & business management | EU |
Have security questions?
Our security and compliance team is here to help.