Montpellier, France — SeqOne, a pioneer in clinical genomic data interpretation, announced that its cloud services have officially received a Type 2 attestation against the BSI C5:2020 criteria catalogue. This milestone reflects SeqOne’s ongoing commitment to protecting the genomic data its customers entrust to it, and gives laboratories and hospitals independent evidence of how that data is secured in the cloud.
Issued by Germany’s Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik, BSI), the C5 catalogue sets demanding, detailed criteria for cloud security, from encryption and access control to incident management and business continuity. Achieving a Type 2 attestation (audited under ISAE 3000) confirms not only that robust security controls exist within SeqOne’s cloud infrastructure, but that an independent auditor has tested and verified their operational effectiveness in real-world, day-to-day operations.
Redefining Trust and Security in Genomic Healthcare
Genomic data is among the most sensitive personal health information generated today. As clinical laboratories, diagnostic centers, and hospitals scale up next-generation sequencing (NGS) workflows, ensuring data integrity, privacy, and system resilience is critical.
The BSI C5:2020 Type 2 attestation provides independent verification of SeqOne’s rigorous security measures across key areas, including data encryption, access control, system logging, operational resilience, and incident management.
This milestone complements SeqOne’s existing certifications: its Quality Management System is certified under the EU In Vitro Diagnostic Regulation (IVDR) and to ISO 13485:2016, and SeqOne Platform is CE-marked under the IVDR. With quality and cloud security both independently assessed, SeqOne offers laboratories and hospitals a single partner whose processes have been audited end to end, from software development to data hosting.
What This Means for Clinical Labs, Diagnostic Hospitals, and Health Systems
The C5:2020 Type 2 attestation delivers direct operational benefits to diagnostic teams and healthcare institutions:
- Verified Security Controls for Sensitive Genomic Data: An independent audit confirmed that the security controls protecting patient genomic data and clinical reports processed through SeqOne’s cloud platform are in place and work effectively.
- Streamlined IT and Procurement Reviews: Healthcare providers can leverage SeqOne’s audit report to simplify and accelerate internal compliance, data protection, and IT security evaluations.
- End-to-End Compliance Leadership: By pairing an IVDR-certified Quality Management System with a C5 type 2 attestation for its cloud services, SeqOne simplifies vendor management for clinical laboratories looking for single-provider accountability.
Explore Our Security Standards
To review our security documentation and access our compliance resources, visit the SeqOne Trust Center.
Have questions regarding our C5 attestation, compliance requirements, or how SeqOne supports secure genomic workflows? Let's get in touch!
