Data security and residency
Sequencing data is processed and stored on servers in Canada. This page explains exactly where your data goes, how it is protected and how to delete it.
Where your data is processed and stored
Sequencing data is processed and stored on servers in Canada. The web application, database, file storage and the analysis servers that run the pipelines are all hosted in Canada. Analyses run on dedicated analysis servers, separate from the web application, and bacterial WGS jobs each get a fresh server that is destroyed when the job finishes.
What the AI interpretation receives
The AI-written interpretation in each report is generated by Google's Gemini API from summary results (taxonomic composition, diversity and quality metrics); sequencing reads are never sent.
The prompt contains numbers such as read counts, the relative abundance of the most common phyla and genera, and diversity indices. It does not contain FASTQ files, sequences or your account details.
Encryption and access
- All traffic between your browser and BioAnalysis.ca is encrypted with TLS.
- Passwords are stored only as bcrypt hashes.
- Access to production systems is restricted to authorized personnel.
- Payments are handled by Stripe; card details never reach our servers.
How long data is kept
Uploaded FASTQ files are deleted automatically 30 days after the analysis finishes. Reports, figures, tables and data packages stay in your account until you delete them, so keep your own copy of the raw FASTQ files if you may want to re-run an analysis later.
Deleting your data
You can permanently delete any analysis from your dashboard. Deletions are recorded in a deletion log so you can see what was removed and when. For account deletion or a copy of your data, email [email protected].
For research ethics boards and privacy offices
Canadian institutions often need to confirm where research data is processed before a study starts. If your REB or privacy office needs a written data-handling summary, email [email protected]. See also the privacy policy and terms of service.
Data security FAQ
Is my sequencing data stored in Canada?
Yes. Sequencing data is processed and stored on servers in Canada. Uploaded FASTQ files, intermediate files and results stay on Canadian infrastructure.
Does any data leave Canada?
Only for the AI-written interpretation. The AI-written interpretation in each report is generated by Google's Gemini API from summary results (taxonomic composition, diversity and quality metrics); sequencing reads are never sent. Web traffic also passes through Cloudflare's network on its way to our Canadian servers, as it does for most websites.
Can I delete my data?
Yes. Uploaded FASTQ files are deleted automatically 30 days after the analysis finishes, and you can permanently delete any analysis, including its report, from your dashboard at any time. Each deletion is recorded in a deletion log. To delete your whole account, email [email protected].
Can I use BioAnalysis.ca for human-derived samples?
Microbiome samples from human studies are common. Upload only de-identified sequencing data and follow the conditions of your research ethics approval. The platform is for research use only and is not a clinical diagnostic service.