安全

Security program

Celiums Solutions, LLC maintains technical and organizational practices proportionate to OncoRadar's current service stage. Security is shared: users must protect devices, credentials and exported data.

• TLS in transit and managed encryption capabilities at rest
• Uploaded files encrypted with a customer-managed key; the original is readable only by an isolated processing role and is purged after the retention period
• Automated de-identification of uploaded documents, images and DICOM before any model or reviewer sees content; chat text redacted for identifiers before storage
• Tenant-scoped authorization and least-privilege application access
• Hashed session tokens and API secrets, revocation, quotas and audit trails that record counts and statuses rather than content
• Origin checks for browser mutations and secure, HttpOnly session cookies
• Sign-in browser challenges, adaptive CAPTCHA, temporary IP rate limits and a private edge-to-origin header; aggregate firewall metrics without sampled requests or request-body logging
• Dependency, incident and vulnerability management appropriate to the service stage
• Control-plane database and catalog backup processes with restoration procedures

Authentication and isolation

A managed identity service supports account authentication. OncoRadar stores session and API credential verification values as one-way hashes in the control plane, supports revocation, scopes data operations to authorized projects, and records selected access and quota events. Browser mutations use origin checks and secure cookies. Sign-in requests pass through a cloud firewall with automatic browser challenges, CAPTCHA after repeated attempts and temporary IP rate limits. The origin validates a private edge header to prevent bypassing these checks through another distribution. These controls reduce automated abuse; they do not guarantee that every malicious attempt will be detected.

Uploaded files, encryption and role separation

Uploaded files are written directly to encrypted object storage under a customer-managed key with rotation enabled. The original file is readable only by an isolated processing role; the application role cannot read originals and works only with de-identified derivatives. Processing happens asynchronously; identifiers are removed or replaced before any model or reviewer sees content, and items that cannot be cleared are held for review. Originals are purged after the retention period (30 days by default). Audit events record counts and statuses, never file names or content.

Data and backups

Managed cloud capabilities protect data in transit and at rest where configured. Control-plane database and catalog backups support recovery. Backup rotation means a deletion request does not erase every backup immediately; restored data remains subject to the deletion workflow.

Report a vulnerability

Send a concise description, affected URL or component, reproduction steps and impact to security@oncoradar.org. Do not access other users' data, disrupt service, use social engineering or publish sensitive details before remediation coordination. This draft identifies a reporting channel but does not promise a bounty, response time or remediation outcome.

No certification claim

This notice does not claim SOC 2, ISO 27001, HIPAA, PCI DSS or any other certification or regulated-service status. A Business Associate Agreement with our cloud provider is being put in place and uploads run on services eligible for regulated health data, but that agreement is not a certification and OncoRadar does not claim HIPAA compliance certification. No system is perfectly secure. Customers should assess OncoRadar for their own risk and compliance needs and must submit patient-derived material only through the upload flow.

Incidents

Incident response procedures, legally required notices, notification periods, contacts and contractual security schedules require operational verification and legal review. This draft does not represent that a particular regulatory incident-response standard or deadline has been implemented.