SOLUTION BRIEF

Build a secure and compliant genomic sequencing
practice with BaseSpace™ Sequence Hub on AWS
BaseSpace Sequence Hub is a powerful, easy-to-use bioinformatics computeand storage environment designed to manage, analyze, and share data.

Why Illumina is leveraging AWS
Healthcare compliance is constantly evolving. As practices become increasingly global,
you not only have to worry about the scalability of your operations, but whether they
are compliant with domestic and international regulatory standards. Organizations areturning to BaseSpace Sequence Hub on Amazon Web Services (AWS) to support theirgenomic sequencing operations because it delivers secure, high-performance computing
instances and scalable storage. Instances can be hosted in the AWS Region of yourchoice, empowering you to meet requirements, such as Health Insurance Portability andAccountability Act (HIPAA) and General Data Protection Regulation (GDPR).

BaseSpace Sequence
Hub is third-party
certified on the following
regulatory standards:

AWS Shared Responsibility ModelAWS works with each customer and partner through a shared responsibility model tomanage security and compliance within the cloud, and of the cloud itself.
Customer Data

Platform, Applications, Identity and Access Management

Operating System, Network & Firewall Configuration

Customer
Responsible for
Security “IN” the cloud

Client-side Data
Encryption and Data
Integrity Authentication

AWS

ComputeServer-side Encryption(File System and/or Data)

StorageDatabase

Network Traffic
Protection(Encryption/Integrity/Identity)

Networking

Responsible for
Security “OF” the cloudAvailability Zones
Edge Locations

AWS Global Infrastructure
Regions

BaseSpace Sequence Hub on AWS
BaseSpace Sequence Hub is natively integrated with AWS services and your sequencing instruments, enabling you to more easily
analyze and manage your data in a secure, compliant fashion.
Comprehensive
security andprivacy controls

Easy sharing
and collaboration

Simple, single-click
analysis leveraging
public and private tools

Advanced automationand integration

For Research Use Only. Not for use in diagnostic procedures.

SOLUTION BRIEF

Key security and compliance capabilities*
End-to-end data security
and protection

Granular identity and accessmanagement controls

Audit-ready logging
and monitoring• Data integrity checks are• Access control lists, or traffic flow

• Sequence Hub produces detailed

performed on a consistent basis,
with self-heals to prevent data loss

• AES-256 and Transport Layer

Security (TLS) are leveraged toencrypt data at-rest and in-transit,respectively• Customer data is stored

synchronously across multiple
AWS Availability Zones (AZs),
with three sets of backups(hourly, daily, and monthly)policies, are established on eachmanaged interface to regulate
traffic flow

• Workloads run within Amazon
Virtual Private Clouds (VPCs),
providing virtual isolation for yoursensitive data
• Users can dictate policies forlogin credentials, and configure
account lockout practices toprevent brute forcing• Single sign-on (SSO) capabilities
are authenticated using security
assertion markup language (SAML)

audit trails describing the lifetime ofa sample• Access and changes to any data

are logged and maintained to meetdata retention requirements• Precision monitoring capabilities

validate whether instruments
integrated to the BaseSpaceplatform are fully operational andoperating in a compliant manner• Illumina offers system validation forlabs that don’t have the resources
to complete compliance validations
on their own* While many of these features are available on all versions of BaseSpace Sequence Hub, some are only available in the BaseSpace Enterprise subscription tier.

Responsibilities to note
Here’s a brief overview of common regulatory requirements you likely need to meet:
HIPAA
Applies to the privacy and securityof certain health information in theUnited States• Implement physical facility access
controls (e.g. AWS data centers)• Establish role-based access
controls to your software systems• Uphold and maintain data

integrity, including data backupsand recoverability

GDPR
Applies to the privacy and protectionof personal data of EU subjects

CLIA and CAP
Applies to diagnostic testing of
human samples in the United States• Keep data in the same country• Prevent modifications

as the individual it describesdata sovereignty)• Encrypt data at rest

• Consistently monitor yoursecurity posture• Support disasterto published apps

• Maintain records of

all result versioning• Demonstrate the reproducibilityof testing, including original
analysis results

recovery capabilities• Document all steps being

taken to achieve compliance

AWS and BaseSpace Sequence Hub can help you meet these requirements and others that you may be subject to.

Getting started

With Illumina and AWS, customers managing genomic data gain improved management, protection, and access capabilities.
To learn more, contact your Illumina or AWS account manager.
Illumina | For more information, contact us at:

www.illumina.com | 1-800-809-4566 | U.S. SALES© 2019, Illumina, Inc. All Rights Reserved.
© 2019, Amazon Web Services, Inc. or its Affiliates. All Rights Reserved.

For Research Use Only. Not for use in diagnostic procedures.
QB #7139