Security and compliance are not add-ons at SignalPGx; they are the foundation of being a trustworthy reporting and business-associate partner to clinical laboratories. Our platform is built to protect patient data, keep each lab's information strictly separated, and support the regulatory obligations that come with handling protected health information. Every feature we ship is designed to fit within your CLIA-certified workflows and your responsibilities to patients and ordering clinicians.
Data security
SignalPGx runs on secured AWS infrastructure, with technical controls designed to protect protected health information throughout its lifecycle.
- Hosted on secured AWS infrastructure.
- Encryption of data in transit and at rest.
- Role-based access control (RBAC) so users see only what their role permits.
- Strict multi-tenant isolation that keeps each laboratory's data separate from every other tenant.
- Complete audit trail and audit logging across the platform.
Regulatory compliance
SignalPGx is built to operate within the regulatory framework that governs clinical laboratories and health data.
- HIPAA compliant: SignalPGx operates as a HIPAA business associate, and a Business Associate Agreement (BAA) is available.
- GDPR compliant.
- Designed to fit CLIA-certified laboratory workflows.
Clinical governance and safety
SignalPGx keeps qualified clinicians in control of every clinical decision. Our software supports interpretation and reporting; it does not replace clinical judgment.
- Human-in-the-loop: every report is reviewed and released by the laboratory medical director, a licensed clinician.
- Final prescribing decisions remain with the ordering clinician.
- SignalPGx is not an FDA-cleared or FDA-approved diagnostic device. It is decision-support and reporting software.
- Interpretations are graded against established evidence sources, including CPIC, DPWG, FDA drug labels and pharmacogenomic associations, PharmGKB, and more.
Questions about security or compliance?
Our team is happy to discuss our security practices, provide a Business Associate Agreement, or answer questions from your compliance and IT teams.
- Email: info@signalpgx.com
- Phone: +1 (833) 838-6500