For:Security and compliance reviewers · Site IT
AitriumOS is the desktop application that Sites install on a workstation inside their own network. It receives a clinical trial’s data-handling policy and runs validation, standardization, and de-identification on the Site’s local patient DICOM data so the dataset conforms to that policy — before the prepared dataset is transferred directly to the investigator.
AitriumOS is one component of the broader Aitrium platform. This section is the IT/security reference for the AitriumOS desktop application specifically; additional platform areas are documented elsewhere in this Trust & Security center over time.
Security posture at a glance
Patient data stays local
Raw patient imaging is processed on the workstation and is never uploaded to Aitrium’s cloud. It leaves only via a transfer to the investigator’s destination.
Outbound client only
The application initiates outbound HTTPS connections, plus the direct SFTP transfer to the investigator; nothing connects to the workstation. There is no inbound listener and no server software to host.
No administrator rights
Normal operation requires no elevation, and a per-user installer installs without administrator rights.
Signed & scanned builds
Installers are code-signed via Microsoft Trusted Signing and verified clean by multi-engine scanning; updates are cryptographically verified before they apply.
Security reference
Architecture
Local and cloud components, with system and data-flow diagrams.
Data flows & residency
Network destinations, ports, firewall allowlist, and where patient data lives.
Access management
Roles, trial-level permissioning, and authentication.
Build integrity & validation
Code signing, hashes, multi-engine scan results, and endpoint-protection guidance.
Guides for IT teams
Site IT: setup checklist
Install, allow network access, configure a proxy, and validate AitriumOS at your site.
Site IT: deployment & updates
System requirements, installers, and the update mechanism.
Site IT: corporate HTTP proxy
Proxy configuration, authentication, and the acceptance test.
Trial organization IT: SFTP server compatibility
Supported SSH algorithms and sign-in methods, and the traffic an investigator’s SFTP server will see.
For a detailed IT/security review or to request environment-specific information (e.g., a complete firewall endpoint list), contact [email protected].