Your data

What happens to a target you send us

Who sees it, where it runs, what leaves our systems, how it is stored, and how to have it deleted.

Last updated: 3 October 2026

• Who sees it. Only the EpochCore team members who run your job.
• Where it runs. Folding, candidate generation and affinity prediction run on EpochCore's own GPU hardware (Boltz-2 and GenMol). One outside service can be involved: NVIDIA's hosted alignment search receives your target's amino-acid sequence (for most targets a public UniProt sequence); on request it runs on our own hardware instead. If our hardware cannot finish a step, that step is left out of your record and marked as failed; it is never sent somewhere else to run. Your record names the host that ran each step.
• What stays inside. We do not send your candidate molecules to any outside service. The drug-class safety and evidence steps query public databases using only public identifiers — your target's UniProt accession and the names of approved drugs. Trial-design runs on IBM Quantum receive only the design problem, never your target or molecules.
• How it is stored. The target file we run from and your results are kept on our own hardware, encrypted with post-quantum encryption (ML-KEM-1024 with AES-256-GCM); the key that opens them stays on that machine, and its only backup is sealed by IBM Key Protect in IBM's hardware security module, where it cannot be exported. Each file also has an encrypted backup copy in private Cloudflare storage, which cannot be opened without that key. Anything you type into the request form is stored by our hosting provider, Cloudflare, and copied to our customer-relationship system, HighLevel.
• What is published. Nothing, unless you ask. Your sealed record is delivered to you directly. Only its fingerprint — a hash that reveals nothing about the content — joins our daily timestamp batch in Bitcoin and on Base.
• Training. We do not train models on your data, and your results are never used as a starting point for anyone else's run.
• Retention and deletion. We keep your inputs and results until you ask us to delete them, and delete them, including the encrypted backup copy, within 30 days of the request. Fingerprints already timestamped cannot be removed from Bitcoin or Base, but they reveal nothing about your target.
• Confidentiality. We will sign your NDA, or a mutual NDA, before you send anything.
• Contact. john@epochcoreqcs.com