Snapshot 253578
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content Seqera Privacy and Security Center Seqera is the driving force behind Nextflow, MultiQC, and the Seqera Platform - the modern biotech stack. Seqera empowers scientists to solve today's most complex and essential challenges; from pioneering innovative therapeutics to unveiling the secrets of our universe. trust@seqera.io Privacy PolicyOpens in new tab Compliance SOC 2 Type II ISO 27001:2022 (In Progress - H2 '27) GDPR CCPA Resources View all Compliance 2026 - Seqera - SOC 2 Type II 2026 - SOC2 Type II Bridge Letter Penetration Tests 2025 Executive Pentest Report - Seqera Platform Cloud and API 2025 Executive Pentest Report - Wave and Fusion Data Privacy Seqera Platform Cloud Data Handling Overview Seqera Platform Enterprise Telemetry Data Overview Controls View all Infrastructure security Encryption key access restricted Unique account authentication enforced Production application access restricted View 4 more Infrastructure security controls Organizational security Asset disposal procedures utilized Employee background checks performed Code of Conduct acknowledged by contractors View 5 more Organizational security controls Product security Data encryption utilized Control self-assessments conducted Penetration testing performed View 1 more Product security control Internal security procedures Continuity and Disaster Recovery plans established Continuity and Disaster Recovery plans tested Development lifecycle established View 20 more Internal security procedures controls Data and privacy Data retention procedures established Customer data deleted upon leaving Data classification policy established Subprocessors View all Amazon Web Services • Cloud Infrastructure UK (AWS, eu-west-2) Applies to: Seqera Platform Cloud; Seqera Enterprise (optional, only when enabled) Cloud infrastructure where Seqera Platform Cloud runs. For Seqera Enterprise, AWS only processes data if the customer enables optional services: License Manager telemetry or the Seqera-hosted Wave service. Google Workspace • Productivity EU Applies to: All customers (business operations) Productivity tools (email, calendar, file storage, communications...) Freshdesk • Customer support US Applies to: All customers (business operations) Customer Support ticketing platform Salesforce • Customer Relationship Management US Applies to: All customers (business operations) CRM (Sales) Updates View all Privacy New in the Trust Center: Seqera Platform data handling documents Published October 20, 2026 Two documents that describe how Seqera Platform handles customer data are now available for download in the Trust Center. Until now we shared them on request during security reviews. Publishing them here gives your security and privacy teams direct access. Seqera Platform Cloud Data Handling Overview For customers using Seqera Platform Cloud. Nextflow pipelines run in your own compute environments, and your scientific data stays there. The Platform receives workflow and task execution metadata, and the document lists those fields. It also explains how Data Explorer, Studios and Datasets handle data, and points out the fields (task scripts, environment variables, error messages) that can capture sensitive values if pipeline code prints or embeds them. Seqera Platform Enterprise Telemetry Overview For customers running Seqera Platform Enterprise in their own infrastructure. Once a day, the Platform sends a small usage telemetry payload to Seqera over the license check connection it already uses. The document lists every field in that payload. User ids, private repository references and workspace names are pseudonymized with an HMAC-SHA256 key that each installation generates and keeps in its own database. Air-gapped installations can write the payload to a local file instead and decide whether to share it. If you have questions about either document, contact your Seqera account team. Compliance SOC 2 Type II Re-Attestation Complete (August 1, 2025 to February 28, 2026) Published July 15, 2026 We're pleased to share that Seqera has completed its latest SOC 2 Type II examination, covering the period August 1, 2025 – February 28, 2026. The audit was conducted by Insight Assurance, and the report was issued with no exceptions noted. This re-attestation confirms that Seqera's security controls continue to be suitably designed and operating effectively, with no material changes to our control environment or security incidents during the review period. The updated report is now available in our trust portalOpens in new tab for download. As always, please reach out to compliance@seqera.io with any questions. Security 2025 Penetration Test Executive Summary for Wave and Fusion Published Published February 16, 2026 We've published our latest penetration test executive report for the Wave and Fusion application and API, conducted by Cobalt Labs between November 18 and December 2, 2025. The report is available as part of our compliance documentation and accessible under NDA. This assessment is part of our ongoing SOC 2 Type II renewal audit, covering August 2025 through February 2026. The updated SOC 2 attestation report will be available upon completion of the audit process in March 2026. The engagement included a manual evaluation of application security, business logic, and vulnerabilities cataloged under the OWASP Top 10 framework. The assessment also included a review of security controls aligned with the OWASP Application Security Verification Standard (ASVS). The assessment identified no Critical, High, or Medium severity vulnerabilities. Low-severity findings were documented and are assessed and prioritized individually in accordance with Seqera’s risk management and vulnerability management procedures. Security 2025 Penetration Test Executive Summary for Seqera Platform Cloud Web and API Published Published January 13, 2026 We've published our latest penetration test executive report for the Seqera Platform and API, conducted by Cobalt Labs between September 29 and October 13, 2025. The report is available as part of our compliance documentation and accessible under NDA. This assessment is part of our ongoing SOC 2 Type II renewal audit, covering August 2025 through February 2026. The SOC 2 attestation report will be available shortly after completion in March 2026. The assessment included a manual evaluation of application security, business logic, and vulnerabilities cataloged under the OWASP Top 10 framework. The engagement also reviewed controls aligned with the OWASP Application Security Verification Standard (ASVS). All identified vulnerabilities have been resolved.