How we handle personal data

Visiting axiomebio.com

This site does not run third-party analytics and does not set tracking or advertising cookies. If that changes, this page will say so before it happens, and a cookie banner will appear where required.

If you use the contact form or email us directly, we process what you send (name, email address, message content) only to respond to you. We don't add you to a mailing list from a single contact-form submission.

Our hosting provider may log basic technical data (IP address, timestamp, requested page) for security and operational purposes, in line with standard web-server logging — not used to build a profile of visitors.

Data processed through the Axiome platform

This section is for institutions considering or running a pilot.

Axiome is in structured early-stage readiness, not enterprise-complete — the goal is to be controlled early and formalize progressively as pilots become real, rather than simulate a maturity that doesn't exist yet. A Data Processing Agreement is put in place per pilot, not asserted as a blanket policy that already covers every relationship.

Roles

For pilot data, the institution providing the data is ordinarily the data controller; Axiome acts as processor, operating only on the controller's documented instructions. The exact allocation is confirmed in writing per pilot, before data moves.

What's processed

Tabular results from your own analyses (CSV/TSV/XLSX — RNA-Seq, flow cytometry, clinical and longitudinal data), not raw upstream files. Whether this constitutes personal or special-category (health/genetic) data under GDPR Article 9 depends on whether it arrives identifiable or already pseudonymised — that's established with each controller before a pilot starts, not assumed by Axiome.

Where it's hosted

In the EU, on HDS-certified infrastructure in France, with EU data residency — no transfer outside the EU, no US-controlled infrastructure for personal data. Encrypted at rest and in transit.

Isolation

Multi-tenant with strict segregation between organisations, and role-based access. Workspaces are private by default.

Retention and deletion

Retention is set per pilot agreement, not open-ended by default. On exit, your data and findings are exportable in full as flat portable JSON — nothing withheld — and deletion is available on request.

Your rights

If you're a data subject whose information appears in a dataset processed through a pilot, requests about that data (access, correction, erasure) are routed to the controlling institution first, since Axiome processes on their instructions. If you're not sure who that is, contact us and we'll help route the request.

Questions

Privacy questions for either scope: contact@axiomebio.com