Company: TEM
Filing Date: 2025-02-24
Form Type: 10-K
Source: 0000950170-25-025603
Chunk: 42

Company: Tempus AI, Inc.
Filing Date: 2025-02-24
Form: 10-K
Item: Item 1
Chunk 42
---
, or once we obtain data through one of our dedicated connections to providers, we utilize a different suite of proprietary software applications to abstract, structure, and de-identify the resulting data to help augment our existing multimodal dataset and provide additional healthcare services to our customers. Our tools have become highly efficient over time allowing us to abstract data, often between 50-100 discrete data elements per patient case, in approximately an hour (or the cost equivalent), which do both onshore and offshore through dedicated teams we have established to perform the data curation and abstraction. In addition, we have the capability to perform enhanced abstraction, which can take several hours per patient case, allowing us to define a custom set of features over a defined period of time that we want abstracted. Each of our proprietary tools is designed to enhance our customers’ experience, either by creating useful information that assists in the treatment of patients, or by creating an efficient back-end infrastructure that allows us to deliver our services more quickly and efficiently.

Information Security

We endeavor to maintain a robust information security program in an effort to protect all of the sensitive data we maintain, including PHI and PII and we take all threats to the availability, integrity and confidentiality of that data with the utmost seriousness. Our security program consists of a layered defense approach starting with appropriate data and system design through architectural principles that include security as a core component at every step of the process. This security by design approach is enhanced with physical security, host and endpoint device management, application security, and infrastructure and cloud security. In each of those areas, we utilize industry-standard third-party tools that are designed to assist our team of security professionals in their various tasks and we work closely with our vendors, including those who provide cloud computing services that make up substantial parts of our infrastructure (e.g., Google and Amazon).

Our security program is operationalized through documented policies, procedures and required training for all staff in the entire company, with special emphasis on key teams in engineering and IT operations who develop, monitor and maintain the applications and systems used in our business. In an effort to ensure that these policies are adhered to and that no new vulnerabilities arise, we conduct regular auditing of a wide swath of our security related measures, including a mix of self-audits, external penetration testing, external application security audits and audits performed by our customers and partners. Our security team is also instrumental in maintaining our ISO 27001 certification and assisting the compliance and legal teams with other legally required audits and provides detailed reports regularly to upper management and the Board