// Trust & Security Report

    Numerion Labs, Inc. logo

    Numerion Labs, Inc.

    Preclinical AI-driven drug discovery platform for virtual screening and small-molecule candidate identification. Primarily serves pharmaceutical R&D, biotech, and academic research teams. Key technology: APEX (ultra-fast virtual screening engine) for screening billions of compounds in seconds.

    Certifications held

    1

    Maturity

    Growth

    Trains on your data

    Unknown

    Trust center

    No

    // Certification ledger

    Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.

    GDPR (data transfer posture)
    HELD

    Pursuant to the recipient's compliance with standard contractual clauses or Binding Corporate Rules Pursuant to the consent of the individual to whom the personal information pertains As otherwise permitted by applicable European requirements.

    Verify on numerionlabs.ai
    > Show 5 unconfirmed / not-held certifications
    SOC 2 (Type 1 or 2)
    NOT CONFIRMED

    No public evidence of SOC 2 certification on numerionlabs.ai, privacy policy, or accessible trust/security documentation.

    source: numerionlabs.ai
    ISO 27001
    NOT CONFIRMED

    No public evidence of ISO 27001 certification on numerionlabs.ai or publicly accessible materials.

    source: numerionlabs.ai
    HIPAA
    NOT CONFIRMED

    Atomwise is a preclinical R&D tool (not a clinical or regulated healthcare system handling PHI). No HIPAA compliance claim or audit trail/regulatory controls documented publicly. Not applicable to the product scope.

    source: numerionlabs.ai
    ISO 27017 / ISO 27018
    NOT CONFIRMED

    No public evidence of cloud-specific or PII-handling certifications.

    source: numerionlabs.ai
    PCI DSS
    NOT CONFIRMED

    No evidence; product is not a payment-processing or cardholder-data system.

    source: numerionlabs.ai

    // Privacy & AI training

    Trains on customer data

    Not stated

    Data processing agreement

    Not offered

    Data region

    Transfers outside EEA use standard contractual clauses or Binding Corporate Rules; no specific data residency guarantee documented.

    No public statement on whether the platform trains on or uses customer project data for model improvement. B2B preclinical tool; typical practice in research software is no training on customer data without explicit consent, but not explicitly stated.

    // Security controls

    Encryption in transit

    Standard practice implied; no specifics documented

    numerionlabs.ai

    Encryption at rest

    Not documented

    numerionlabs.ai

    Security safeguards

    Policy states: organizational, technical, and physical safeguards designed to protect personal information. No specifics (e.g., access controls, logging, penetration testing).

    numerionlabs.ai

    Audit trail / compliance controls

    No public documentation of audit trails, electronic signatures, or regulatory controls (21 CFR Part 11, EU Annex 11) for clinical/regulated use.

    numerionlabs.ai

    Vulnerability disclosure / bug bounty

    Not documented on public website

    numerionlabs.ai

    Third-party security audit / penetration testing

    No public evidence

    numerionlabs.ai

    Incident response policy

    Not documented

    numerionlabs.ai

    // Products & data scope

    APEX (Approximate-but-Exhaustive Search) Virtual Screening EnginePreclinical Drug Discovery

    data: Chemical structures, compound libraries, research project metadata. Not patient health information.

    Ultra-fast GPU-accelerated screening of billions of compounds. Used by pharma, biotech, and academic partners. No clinical or healthcare data handling.

    Numerion Labs PlatformAI/ML Drug Discovery

    data: Small-molecule design data, hit identification, lead optimization. Proprietary research projects and collaboration data.

    Targets 600+ disease targets in partnership with 250+ organizations. Infrastructure: WEKA data platform, NVIDIA GPU compute, AWS cloud. Not a regulated clinical system.

    // What to watch

    • No trust center or public security documentation published
    • Privacy policy mentions general safeguards but provides no specifics (no mention of encryption standards, access controls, audit logs, or penetration testing)
    • No formal security certifications (SOC 2, ISO 27001) documented or claimed
    • No terms of service page publicly accessible (404 on standard URL)
    • GDPR data-transfer posture documented (SCCs/BCRs), but no other regional compliance explicitly stated
    • Product is preclinical R&D tool, not a regulated clinical system; HIPAA inapplicable by scope, not by choice
    • No public statement on AI model training on customer data
    • Well-funded company ($174M+) but limited transparency on security/compliance posture typical of mature software vendors
    • Rebranding from Atomwise to Numerion Labs (Oct 2025) may indicate evolving corporate/security strategy; historical Atomwise security posture unknown

    // At a glance

    Pricing model

    B2B partnerships / licensing (not publicly detailed; enterprise/research-focused)

    Self-hostable

    No

    // How we verified this

    Every certification marked HELD is confirmed against a verbatim quote on Numerion Labs, Inc.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.

    Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.

    numerionlabs.ai

    > Browse all vendor trust reports