Privacy and Security

CDD Data Privacy Policy

Each research group decides if, when, and with whom to share data through username/password-protected, invitation-only online groups.
By default each group's data remain 100% private, unless a researcher agrees explicitly to share it with other named users or with the CDD community. This can be done temporally, for example data can be kept private until after publication or patent.

CDD encrypts all traffic between a user's web browser and our servers once the user has logged in.
CDD performs thorough automated testing of our application code, including security tests to make sure one group cannot access another group's private data.
CDD deploys two firewall levels (“defense in depth”), the first in hardware and the second in software, for each sensitive server in our server environment.
CDD encrypts all database and customer file backups using public key cryptography, and the private keys are backed up securely.
CDD stores user passwords in our database using strong, one-way encryption hashes.
CDD stays current with all security updates to our system software, firmware and operating systems.
CDD relies on Linux systems for all database operations.
CDD enforces mandatory password security policies.
CDD limits and audits internal access to data servers and superuser accounts.

For many more details regarding the security of the data within the CDD database, please email .