Compliance & governance

Designed around the Five Safes

CHORUS maps each of the Five Safes to a control in the platform. Administrative changes, data movements and sessions are logged and reviewable by your DPO, ethics board or regulator.

Standards

Aligned with European frameworks

CHORUS is designed to align with the European and international frameworks for health data, trusted research environments and data protection.

  • European Health Data Space (EHDS) and TEHDAS2, its specification for secure processing environments
  • SATRE v2, the standard architecture for trusted research environments
  • General Data Protection Regulation (GDPR)
Safe projectsOne isolated workspace per project, with named owners and approval workflows.
Safe peopleSign-in through your institution’s identity provider, roles scoped to platform, workspace and session.
Safe settingsNetwork, storage and process isolation for every workspace; air-gapped by default.
Safe dataData enters only through an approved import, so what goes into each workspace is reviewed.
Safe outputsExports are frozen when requested and released only after a data manager approves them.

You stay in control

You set the rules. CHORUS enforces them.

Your institution decides who gets in, which projects run and what data moves. CHORUS makes sure it happens exactly that way.

Your institution

Sets the rules

  • Who gets access to the platform and to each workspace
  • Which role each person has in each workspace
  • Who approves every import and export
  • Workspace network policy: open, allow-listed or air-gapped
  • Where the platform runs: on premises or in your cloud
  • Which projects get a workspace, and who owns each one

The platform

Enforces the rules

  • Single sign-on, with multi-factor authentication for local accounts
  • Role-based permissions checked on every request
  • Import and export requests released only after approval
  • Network, storage and process isolation between workspaces
  • Only the screen reaches the researcher’s laptop, never the data
  • Every import, export, session and admin action in the audit trail

Security documentation

Every control traced to the code

The CHORUS security documentation follows the Five Safes and, for each control, cites the code that implements it. Contact us to go through it with your security or data protection team.

Contact us