Data sovereignty by design.
Beluga is a technology platform, not a data custodian. Every clinical record belongs to the patient and is held in trust by your institution. We process data strictly under your direction with full traceability.
Who owns the data?
A clear, legally defined hierarchy governs every record processed.
Patient
All clinical information belongs to the patient. They retain ownership regardless of where the data is stored.
Hospital / University
Your institution manages the data as its legal custodian. Beluga acts exclusively under your mandate, with no rights to access, use, or transfer it.
Beluga
We provide the infrastructure and OMOP engine. We are data processors under LFDPDPPP regulations, not controllers.
Public datasets are standardized to the OMOP model and hosted in the Beluga Library.
Legal and technical protections
Compliance is the core framework of our platform.
LFDPDPPP compliance
Strict alignment with data protection laws. Processing is limited to purposes authorized by your institution, without sale or transfers.
Cloud security
Infrastructure deployed on AWS and GCP with native encryption, private networking, and isolated datasets.
OMOP CDM standard
Medical vocabularies mapped to the OHDSI global model. Conduct multi-center analysis without transferring identifiable records.
Audit logs
Immutable logs record every query and access. Saved parameters ensure full analysis reproducibility for ethics boards.
Granular access control
Control exactly who sees what at the dataset level.
Granular access control is included in all plans as a core feature.
-
Member-level grants
Grant team members or external guests access to selected datasets for a defined period.
-
Time-limited access
Set automatic expiration dates for students, visiting researchers, or temporary collaborators.
-
Cross-institutional guests
Invite external collaborators to specific datasets without opening your entire workspace.
OHDSI Community Members
Team certified in 'Data or Specimens Only Research'
Questions about compliance?
We are happy to review our security and privacy controls with your legal or IT teams.
Talk to us via WhatsApp