Go Back / Location：Home / Application

Data Security

MGI Tech Co., Ltd. (referred to as “MGI”) is committed to building core tools and technology to lead life science. MGI places an utmost priority on data security compliance and privacy protection standards. Our genetic sequencers and BIT products are designed to adhere strictly to the privacy-by-design principle, integrating appropriate security measures from their inception. The products adhere strictly to the vital requirements outlined in the General Data Protection Regulation (GDPR). We also integrate a diverse range of appropriate security technologies and hold certifications from recognized authorities in the field. To fortify the security of our customers' data and equipment, we provide customers with full control over permissions related to data collection, storage, and processing on MGI genetic sequencers. Customers have exclusive access to their data, manage its processes, and determine its handling procedures. As an instrument supplier, MGI does not participate in or interfere with the above activities, does not provide any form of genetic sequencing services, and is not directly involved in the data collection processes.

Security Technologies

MGI has implemented a range of suitable security technologies tailored to the specific business functions of our products. These technologies significantly enhance the overall security performance. Key security technologies include, but are not limited to:

1.Identity Verification and access control
Our product control software assigns user authorization based on their roles. Users can change the default password for their accounts. Customers can delete or deactivate redundant and expired accounts as needed. The identification process follows the necessary complexity requirements and requires periodic updates. Additionally, customers can preset logging duration to activate lock mode when necessary.

2. Network Security Patches and Vulnerability Management
We have integrated a comprehensive Network Security Patches and Vulnerability Management System into our systems. This technology includes identifying the necessary environment, listing hardware and software components that control software operations, and evaluating the current version's security status. We utilize automated tools or collaborate with third-party organizations for vulnerability scanning to identify existing patches and vulnerabilities in our systems. Our process includes clear procedures for notifying and repairing patches, determining vulnerability levels based on the Common Vulnerability Scoring System and operational models, and documenting both resolved and unresolved with detailed explanations.

3. Security Reinforcement
Our security reinforcement technology involves configuring network firewalls and security group rules to limit the access range of communication objects. We also close accounts, communication ports, shared files, and services that are not intended for use. Additionally, we enable antivirus software and ensure regular updates to the systems, engine version of anti-malware, antivirus libraries, and anti-spyware libraries to strengthen security measures.

4. Encryption Technology
Our encryption technology ensures that data is protected during transmission by using encryption methods, ensuring confidentiality and integrity.

Security Certifications

MGI rigorously maintains data security compliance with international standards and regulatory requirements. The company is recognized by reputable third-party organisations for its commitment to information security and privacy protection, as evidenced by the numerous authoritative certifications it holds in these domains.

System Security Certification
MGI has successfully obtained ISO 27001:2013 and ISO 27701:2019 certifications, demonstrating compliance with globally recognized standards in information security and privacy management systems.

Certification and Evaluation of Product Security and Privacy
MGI's ZTRON Appliance and Robotic Ultrasound System are certified with the European Privacy Seal, recognized by Europrise for the adherence to its standards. Additionally, our sequencers DNBSEQ-G99, DNBSEQ-T20×2, DNBSEQ-T7, and DNBSEQ-G400 have undergone an independent evaluation by a legal and technical team led by Dr. Jan-Peter Ohrtmann from Price Waterhouse Coopers (PwC) in Germany (EuroPriSe Accredited). These certifications and evaluations attest to the products' robust capabilities in ensuring data security and privacy protection.