Pluto Biosciences Inc

Security isn't a single yes/no, but Pluto Biosciences Inc is SOC 2 Type II compliant and holds SOC 2 Type II, GDPR. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Pluto Biosciences Inc hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@pluto.bio or via a /security page (Pluto Biosciences Inc lists a security contact).

Pluto Biosciences Inc lists 8 subprocessors on its trust center, including Google Cloud Platform, Slack, PagerDuty, Sentry, Hubspot. Buyers use this for fourth-party risk review.

Pluto Biosciences Inc hosts on GCP, and handles Employee personally identifiable information, Credit card information. Data residency details are on its trust center.

Pluto Biosciences Inc's trust center is at https://trust.pluto.bio. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

You can submit a Data Subject Access Request (DSAR) by contacting us at privacy@pluto.bio. We may require identity verification to protect your privacy. Once verified, we will process your request in accordance with applicable data protection laws and respond within the required timeframe.

If you believe you have discovered a security vulnerability, please report it to us by emailing security@pluto.bio with a detailed description of the issue, including steps to reproduce it. For security reasons, please do not publicly disclose the vulnerability until we have had a chance to investigate and resolve it. We will acknowledge your report and keep you updated on our progress.

Yes, Pluto can be used to store, process, and analyze genomic data that has come from human subjects or patients. As a third-party platform provider, Pluto is committed to ensuring a secure and compliant environment for storing, analyzing, and sharing human genomic data. Although there is no singular governing body providing oversight of genomic data, we abide by the GDPR and NIH GDS frameworks, which provide industry-standard best practices for managing genomic data and ensuring it is used responsibly. The National Institutes of Health Genomic Data Sharing (NIH GDS) policy has long been a cornerstone of ensuring that large-scale genomic data - especially human data - is shared responsibly and in a way that respects both participants' consent and security concerns, and protects the privacy and rights of the individuals who contributed to the research. The GDS policy applies to all NIH-funded research generating human genomic data, as well as any subsequent research using this data, but is a good principle for genomic data regardless of whether the project received government funding. To meet the NIH GDS requirements, Pluto leverages Google Cloud Services, which has undergone an independent third-party assessment and is operating in full compliance with NIST 800-53 controls. In addition, Pluto meets SOC 2 Type II compliance standards, which align closely with NIST SP 800-171 standards. Pluto can provide users with an attestation letter confirming our adherence to these requirements. Additionally, we employ continuous monitoring of SOC2 and other security controls to maintain the highest standards of data security, privacy, and access controls for managing sensitive genomic information. Furthermore, Pluto adheres to the standards set forth in the General Data Protection Regulation (EU) 2016/679 and the UK GDPR (collectively, the “GDPR”), which establishes additional protections for access to personal data about data subjects in the European Union (EU), the European…

Yes! Using Pluto enables academic labs to automatically comply with NIH Data Management & Sharing (DMS) Policy requirements. Pluto is a cloud-based, collaborative life sciences platform that allows research teams to store, manage, and analyze multi-omics data. Scientists can run computational biology analyses, and generate interactive and publication-ready plots directly from their browser. Raw data and results can be shared securely internally and externally, promoting FAIR data and collaboration. Data in Pluto can also be published directly to NCBI Gene Expression Omnibus (GEO) to promote data sharing, reproducibility, and reuse across a wide range of applications to support the NIH policies. Pluto's security program is aligned with the National Institutes of Health Genomic Data Sharing (NIH GDS) policy frameworks, which provide industry-standard best practices for managing genomic data and ensuring it is used responsibly. The GDS policy applies to all NIH-funded research generating human genomic data, as well as any subsequent research using this data. To meet the NIH GDS requirements, Pluto leverages Google Cloud Services, which has undergone an independent third-party assessment and is operating in full compliance with NIST 800-53 controls. In addition, Pluto meets SOC 2 Type II compliance standards, which align closely with NIST SP 800-171 standards. Pluto can provide users with an attestation letter confirming our adherence to these requirements. Additionally, we employ continuous monitoring of SOC2 and other security controls to maintain the highest standards of data security, privacy, and access controls for managing sensitive genomic information. For more details, plus a checklist and other resources for your lab, view our white paper at: https://trust.pluto.bio/resources?s=pfz6mhpw6kn26hulieuq6x&name=white-paper:-nih-data-management-and-sharing-standards-2025