Data Protection & Privacy | EvaGenomics

Data Protection & Privacy

Your Data, Protected.

Built on trust. Designed for security. Centered on you.

Your genomic and health information is deeply personal. EvaGenomics is building its platform around privacy, transparency, participant choice, and controlled access to sensitive information.

How We Protect Data
Your data.
Your choices.
Our responsibility.

How We Protect Your Data

Multiple layers of protection

EvaGenomics combines privacy policies, participant consent, contractual controls, and evolving technical safeguards to reduce risk across the data lifecycle.

✓

Clear Consent

Sensitive health and genomic information is processed under defined privacy policies and consent workflows.

ID

De-identification

For research use, names and contact information are removed from genetic information to the extent possible.

↔

Purpose-Limited Access

Research entities may process EvaGenomics data only for the agreed services and purposes.

◎

Partner Safeguards

Research partners are subject to contractual security, confidentiality, access, and data-use requirements.

How Research Sharing Works

Advancing discovery with your permission

Third-party research disclosure occurs only when the participant expressly consents. Research information is de-identified to the extent possible, recognizing that genomic information can carry a residual risk of re-identification.

1
You Provide Consent Research participation is optional.
2
Information Is De-identified Names and contact details are removed to the extent possible.
3
Controlled Research Access Approved research entities receive information subject to contractual restrictions.
4
Research & Discovery Data may support medical and genetic research.

Third-Party Safeguards

Research partners are held to defined standards

EvaGenomics uses contractual safeguards to restrict how research entities may access, process, retain, transfer, and use EvaGenomics data.

Purpose limitation Data may be processed only for the agreed services and research purposes.
No unauthorized selling or reuse The DPA restricts selling, repurposing, and other unauthorized commercial uses.
Need-to-know access Personnel access must be limited and subject to confidentiality and appropriate training.
No re-identification Research entities are restricted from attempting to re-identify de-identified or pseudonymized data.
Security program Research entities must maintain appropriate technical and organizational measures for the data they process.
Return or deletion Partner obligations continue until EvaGenomics data is returned or irrevocably deleted as required.
🔒

Controlled access for approved research

Research access is tied to participant consent and governed by contractual data-use and security requirements.

Continuous Improvement

Our Privacy & Security Roadmap

Privacy and security are ongoing programs. EvaGenomics has established its legal and consent foundation and has a staged roadmap for expanding operational and technical safeguards as the platform scales.

Foundation

Privacy, consent & contracting

  • Privacy Policy
  • Consumer Health Data Privacy Policy
  • Symptom-checker and sample-collection consent framework
  • Terms of Use
  • Research Data Processing Addendum
  • Business Associate Agreement template where applicable
Near Term

Operational security program

  • Formal incident-response process
  • Employee privacy and security training
  • Written Information Security Program
  • Data protection impact assessments
  • Data-subject-rights workflow
  • Formal retention and deletion schedules
Scale

Technical & assurance maturity

  • Alignment with ISO 27001 / SOC 2 frameworks
  • Encryption-in-transit and at-rest controls
  • Key-management safeguards
  • Data inventory and mapping
  • Re-identification risk assessments
  • Additional international safeguards if needed

Our Commitment

Genomic information deserves careful stewardship.

EvaGenomics is committed to building trust through transparency, participant choice, responsible research access, and continued investment in privacy and security as our platform grows.