Pavia, Italy – enGenome today announced that eVai, its AI-driven variant interpretation platform, has obtained a C5 Type 2 attestation for its cloud services, further reinforcing the company’s commitment to data security, transparency, and regulatory compliance.
The Cloud Computing Compliance Criteria Catalogue (C5) is a German government-backed security framework developed by the Federal Office for Information Security (BSI) to establish minimum security requirements and operational transparency for cloud service providers. It provides a structured, auditable set of cloud security controls that draw from internationally recognized standards such as ISO/IEC 27001 and demonstrate compliance with the rigorous baseline expected in Germany and beyond.
Achieving C5 attestation confirms that eVai operates on a cloud infrastructure that meets these high standards for data protection, information security, and operational reliability. Importantly, the Type 2 audit not only verifies that the required security and compliance controls are appropriately designed, it also confirms that they operate effectively over an extended period of time, providing demonstrable evidence of sustained security performance.
As genomic analysis increasingly relies on cloud-based platforms to manage large-scale sequencing data, laboratories and healthcare institutions must ensure that security and compliance are not compromised. The C5 attestation, in particular the Type 2 level, provides additional assurance that eVai is designed to support sensitive clinical data within a controlled and compliant framework.
