A solution that upholds best practices

Certified, audited, and continuously reviewed.

HIPAA

Privacy and security of US patient health information. Genesis is a HIPAA-compliant solution

GS1

International barcoding standard for identifying, capturing, and sharing supply chain data. Genesis is GS1 and barcode accredited.

Scan4Safety

NHS-led initiative for patient safety, traceability, and supply chain efficiency. Genesis powered 3 of 6 demonstrator sites.

SOC 2 Type II

Independently audited controls for security, availability, processing integrity, confidentiality, and privacy.

GDPR

EU and UK data-protection compliance for the handling of personal and patient data.

HL7 / FHIR

Compliance with the leading healthcare data-interchange standards used by every major EHR.

Self-serve security review

Accelerate Your Security and Procurement Process

Whether you're completing a vendor assessment, preparing for procurement review, or conducting technical due diligence, our team can quickly connect you with the information and resources you need. Request documentation, ask questions, or connect directly with a Genesis expert to streamline the review process.

talk to an expert Request Security Documentation

Where Genesis is heading

Designed for Where Healthcare is Going.

Hands placing a tablet device into a white docking station with curved handles.

01
Genesis is evolving into an AI-native platform, where intelligence is embedded across every workflow, not layered on after the fact.
02
Genesis’ AI continuously learns from clinical, operational, and financial data to identify risk, surface opportunities, and take action in real time.
03
Not just highlighting discrepancies, but resolving them. Not just reporting on performance, but improving it.
04
This is the shift from reactive systems to intelligent operations—where automation becomes decision-making, and insights become outcomes.

Data handling, end to end

How your data moves through Genesis.

From the moment data enters Genesis to the moment a record is purged, every step is governed by a documented control.

1. Ingress.

Data enters Genesis through authenticated, encrypted interfaces (HL7 / FHIR / EDI / REST / SFTP). Every payload is validated against its interface specification before it lands.

2. Process.

Inside Genesis, data is processed in tenant-isolated environments. Application-layer controls enforce role-based access; no engineer touches production patient data outside a logged, time-boxed support session.

3. Store.

Data is encrypted at rest using AES-256. Each customer's data lives in its own tenant boundary. UK data is stored in UK regions. US data is stored in US regions. We do not co-mingle.

4. Egress.

Outbound data flows through the same authenticated, encrypted interfaces — back to your ERP, EHR, BI, or finance system. Every transaction is logged.

5. Retain & Purge.

Retention follows customer policy and applicable law. On contract termination, data is exported and purged on a defined schedule, with a signed certificate of deletion provided.

Subprocessors

Every third party we use, named.

We disclose the subprocessors that touch customer data — by name, by purpose, by region. The full, current list is available on request; the categories below summarize the footprint.

PROVIDER

PURPOSE

DATA REGION

Amazon Web Services (AWS)

Primary production hosting infrastructure

US / UK / EU

Amazon Web Services (AWS)

Secondary hosting and customer-routed deployments

US / UK / EU

Amazon Web Services (AWS)

Customer support ticketing and incident management

EU

Amazon Web Services (AWS)

Transactional notifications, customer correspondence

US / EU

Find the right team

Looking for someone specific?

SOC 2 Type II Report

Independent audit of security, availability, and confidentiality controls.

Download

Penetration Test Summary

Most recent third-party penetration test, summarized.

Download

SIG / SIG Lite Response

Pre-completed Standardized Information Gathering questionnaire.

Download

CAIQ Response

Pre-completed Cloud Security Alliance Consensus Assessments Initiative Questionnaire.

Download

HECVAT (on request)

Higher Education Community Vendor Assessment Toolkit response, available where applicable.

Download

Custom Questionnaires

Our compliance team responds to bespoke security reviews within 3 business days.

Download

"Our customers hold themselves to an exceptional standard when it comes to patient safety. Compliance, for us, means holding ourselves to that same standard with their data. That's why we don't treat HIPAA, GS1, or SOC 2 as boxes to check at audit time — they're the floor, not the ceiling. We don't sell customer data. We don't train models on PHI. And we don't weaken encryption for our own convenience. Those aren't marketing positions. They're commitments our customers can hold us to in writing."

Mike O’Flynn

Chief Technology Officer, Genesis

Common questions, answered directly

Frequently Asked Questions

Answer - Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

.grid { display: grid; width: 100%; grid-auto-columns: 1fr; column-gap: var(--site--gap); grid-template-rows: auto; --_column-count---value: 12; grid-template-columns: repeat(var(--_column-count---value), minmax(0, 1fr)); } .section-tertiary { position: relative; display: flex; padding-top: var(--_spacing---section-space--main); padding-bottom: var(--_spacing---section-space--main); flex-flow: column; align-items: center; background-color: var(--_theme---background-tertiary); color: var(--_theme---text-secondary); } .accordion-item { overflow: clip; padding-top: 1.25rem; padding-bottom: 1.25rem; border-bottom-style: solid; border-bottom-width: 0.0625rem; border-bottom-color: var(--swatch--white-20); transition-property: color, border-color, background-color; transition-duration: 200ms, 200ms, 200ms; transition-timing-function: ease, ease, ease; cursor: pointer; list-style: none; } .accordion-item.-wfp-hover, .accordion-item:hover { border-bottom-color: var(--swatch--white); } @media screen and (max-width: 991px) { .accordion-item.-wfp-hover, .accordion-item:hover { border-color: white white rgb(225, 227, 225); } }

What You Don't See Is Costing You

Identify hidden leakage, inefficiencies and compliance gaps with a free Genesis assessment, built for healthcare supply chain, finance and clinical leaders.

talk to an expert

Looking up at tall modern skyscrapers against a clear blue sky.

Continue your Clinical Lifecycle journey

Certified, audited, and continuously reviewed.

Accelerate Your Security and Procurement Process

Designed for Where Healthcare is Going.

How your data moves through Genesis.

Every third party we use, named.