Home Platform Services Customers Security Company

Enterprise-grade security,
built for pharma.

Built for pharmaceutical-standard compliance and confidentiality requirements; Cellbyte protects your most sensitive commercial intelligence on every layer.

Explore Trust Center →

Certified to the highest standards

GDPR EU compliant
GDPR EU Compliant
ISO/IEC 27001:2022 certified
ISO/IEC 27001:2022 Certified
SOC 2 Type II
SOC 2 Type II
Audit in progress

How we protect your data

No model training

Customer data is used solely for generating insights - never to train AI models.

End-to-end encryption

Data is encrypted at rest and in transit, using industry-leading standards.

Full data control

Self-service deletion, role-based access levels, SSO integration. Only email and name required.

Deployment flexibility

Optional deployment on your own cloud infrastructure.

Independently audited

ISO 27001:2022 certified with zero non-conformities; annual surveillance audits.

Local data hosting

Country-specific hosting keeps data within your chosen jurisdiction.

Security on every layer

Where is customer data hosted and processed?

Customer data can be hosted and processed in the European Union or the United States, depending on the customer’s selected region and contractual arrangement.

Relevant subprocessors may process data only where necessary to provide the service and are subject to appropriate security, confidentiality and data-protection requirements. Appropriate safeguards are applied where international data transfers are required.

Does Cellbyte use customer data to train AI models?

No. Cellbyte does not use customer data to train shared or general-purpose AI models.

Customer data is processed only as necessary to provide the contracted service. Third-party AI services are subject to Cellbyte’s security, privacy and supplier-management requirements.

What data encryption standards does Cellbyte use?

Customer data is protected using strong, industry-standard encryption when stored and when transmitted over public networks. Cryptographic controls are regularly reviewed to ensure they remain appropriate for the information being protected.

How often are security audits performed?

Cellbyte performs an internal audit of its Information Security Management System at least annually. Additional security reviews and assessments are conducted based on risk and significant changes to the service.

Are development, testing and production environments separated?

Yes. Cellbyte maintains separate development, testing and production environments.

Customer production data is not used in development or testing as a standard practice. Any exceptional use must be authorised, limited to what is necessary and appropriately protected.

Does Cellbyte support SSO?

Yes. Cellbyte supports Single Sign-On (SSO) through SAML 2.0 and OpenID Connect (OIDC), allowing integration with common identity providers. Multi-factor authentication can also be enforced through the customer’s identity provider.

Gain real-time visibility into our security posture

Visit Trust Center →