Geneyx Genomex Ltd

Geneyx Analysis

Geneyx Analysis is a cloud-based next-generation sequencing data analysis and interpretation Software-as-a-Service platform. It facilitates standardised variant interpretation and offers AI-driven automated analyses workflows for a wide range of sequencing approaches to support users in rapidly identifying underlying causes in individuals with genetic diseases.

Features

• Analysis options for gene panels, exomes and whole genomes
• Compatibility with short and long-read next-generation sequencing data
• Secondary & tertiary analysis, or tertiary analysis only options
• Scalable cloud infrasturcture and sample throughput
• Automated data analysis, variant annotation, filtering and reporting
• AI-driven variant prioritisation
• Multi-omic integration (DNA, gene expression, methylation)
• Option for LIMS integration
• Clinical Interpretation Service
• Regulatory compliance (ISO13485, ISO 27001-2022, ISO2799 certified, GDPR, IVDR/DTAC-ready)

Benefits

• Operationally efficient and cost-effective decision support platform
• Seamless adaptation to varying analysis and throughput needs
• Standardised, automated and robust variant interpretation
• Multi-omic applications (DNA, expression, methylation) consolidated in one single platform
• Applications for somatic/inherited oncology, rare/inherited disease, PGx and newborn-screening
• Short turnaround times from data input to report through automation
• Evidence-based, AI-driven decision-making support
• Automated integration of user-curated knowledgebases
• Easy establishment of data import/export processes through LIMS integration
• Variant interpretation support via the Clinical Interpretation Service

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@geneyx.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

226292074553802

Contact

Suzanne Drury
07800533005
sales@geneyx.com

About your service

• Service categories:

  Applications

  Production and operations

  Service industry and public sector operations

  • Healthcare
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: The service is available to users at all times throughout the year (24/7) apart from scheduled downtimes for service upgrades (the uptime of the Geneyx platform is historically 99.9%). Service upgrade downtimes will be communicated approximately 2 weeks in advance for customers to make appropriate arrangements.
• System requirements:
  • Internet connection of at least 100Mbit DL/UL
  • Windows/MAC/Linux 64bit PC, minimum 16Gb memory/minimum 500Gb disk
  • Access to a modern web browser (Chrome,Edge,Firefox)
  • Permission to access the Geneyx Analysis site (cloud-based)
  • Unique user email address/email access

User support

• Email or online ticketing support: Yes
• Support response times: Geneyx strive to reply to enquiries as quickly as possible. During business hours (Mon-Fri 9am-5pm) an initial response will be provided within 24 hours of the enquiry being received. For enquiries submitted outside of business hours or on weekends or bank holidays, an initial response will be provided on the next business day.
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Geneyx operates with one support level at no separate cost to the customer. All reasonable efforts are taken to resolve requests as quickly as possible, based on the severity and complexity of the issue. Once a support request is received, a dedicated Field Application Specialist will handle the query. In line with industry standards, queries are classified based on the following priority order:; P1 – Critical: System failure or significant impact on business operations. ; • Response time: Within 2 hours; • Resolution time: Within 24 hours or as mutually agreed upon based on; the nature of the issue.; P2 – High: Major issue affecting system functionality or performance.; • Response time: Within 4 hours; • Resolution time: Within 48 hours or as mutually agreed upon based on; the nature of the issue.; P3 – Medium: Issue causing moderate impact on system functionality or performance.; • Response time: Within 8 hours; • Resolution time: Within 5 business days or as mutually agreed upon based on; the nature of the issue.; P4 – Low: Minor issue or general enquiry.; • Response time: Within 24 hours; • Resolution time: Within 10 business days or as mutually agreed upon based on issue.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Upon expression of interest, Geneyx in the first instance provides an online demonstration of the software, tailored to customer requirements such as application area, sequencing approaches and reporting requirements. This is typically followed by an extended evaluation period where a customer can trial the software for a set number of samples based on a mutually agreed evaluation plan. During this time users are provided with more in-depth online training and relevant user documentation such as user guides. Users are also assigned a dedicated Field Application Specialist (FAS) during the trial period who will be assisting with any queries during the evaluation and additional training if required. ; Upon purchase, a detailed training program tailored to specific customer requirements is then put together which will be delivered by an FAS typically online, or onsite if required. This will cover requirements for specific application areas, sequencing approaches, throughput needs, customisation of analysis and filter settings and reporting requirements.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: At end of contract, users can download their data via the API or the graphical user interface. Users can request assistance from the Geneyx Support Team should this be required. Files available for download include .vcf files, .tsv files for variant calls and variant annotation files. In addition, users can obtain case report files in .csv, .json and .pdf format as well as case QC files in .csv format. Download needs to be completed within 3 months of end of contract.
• End-of-contract process: At the end of the contract customers can decide whether to extend (with or without contract amendments), or terminate the service. At time of termination, the access to the service is closed. After contract termination, data is saved for another 3 months free of charge before being deleted automatically. Customers can however request longer storage at extra cost.; At termination, customers can delete or alternatively download their data. Data can be downloaded through the graphical user interface or the API, or by the Geneyx Support Team upon customer request (at extra cost). Download needs to be completed within 3 months of end of contract.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: The Geneyx Analysis user guide is currently being updated to WCAG2.2AA for release in Q1 2026. At time of G-cloud 15 commence this will be available for users.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: The Geneyx Analysis interface employs an intuitive dashboard layout enabling users to follow the data analysis and interpretation process from data upload to report. It is divided such that users can easily navigate to their area of interest. It includes an ANALYSIS section with direct links to detailed analysis, sample, report, and subject information; a DATA MANAGEMENT section linking to sample sequencing and processing information; and a section linking to a variant browser as well as admin pages. Upon selecting the area of interest, the user will be directed to the appropriate page for more details.
• Accessibility standards: None or don’t know
• Description of accessibility: The Geneyx Analysis user interface as well as The Geneyx Analysis user guide are currently being updated to WCAG2.2AA for release in Q1 2026. At time of G-cloud 15 commence this will be available for users.
• Accessibility testing: The Geneyx website currently complies with WCAG2.1AA, but will be updated to comply with WCAG2.2AA in Q1 2026. Compliance is tested monthly by a verified external testing provider (acessScan; www.acsbace.com) and results can be provided on request. Once the website as well as the Geneyx Analysis interface and Geneyx Analysis user guide are updated and released in compliance with WCAG2.2AA (release Q1 2026), testing will be performed in a similar fashion.
• API: Yes
• What users can and can't do using the API: Users are given an API license (free of charge) which is added to the user account. This provides programmatic access to Geneyx Analysis and the ability to automate sample workflows by integrating with Laboratory Information Management Systems (LIMS) and Electronic Health Record (EHR) systems to facilitate transfer of patient metadata and other relevant information. In addition, users can customise data output through the API based on their requirements and automate the exchange of information between Geneyx Analysis and user LIMS/EHR systems. There is no technical limitation providing the functionalities are supported through the platform. API-supported functions include:; *Sample creation, deletion, and annotation; *Case creation and management; *Metadata retrieval (including information on samples, sequence approach (panel/WES/WGS, enrichment kit type, sequencing instrument, long/short-read sequencing, laboratory protocol/SOP, available clinical records or information and patient phenotype); *Automated tertiary analysis (including batch analysis); *Sample QC review and management; *Access to interim annotation files; *Automated report creation and result integration into LIMS/EHR
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Geneyx Analysis can be customised in a variety of ways. ; *Users can customise analysis protocols and filter settings within the service based on role-based permissions that determine customisation access. ; ; *Report templates for automated reporting can be customised by Geneyx Support (support@geneyx.com) based on user requirements. This includes the customisation of logos, report introduction sections, methodology descriptions, assay limitation descriptions and signature fields. Users can also choose which information fields to incorporate into the report, or create their own templates entirely. ; ; *General software customisation requests, user feedback and feature requests are prioritised and incorporated into the platform as part of ongoing product development and improvement.

Scaling

• Independence of resources: Geneyx Analysis is located on the Azure cloud which provides Redundancy/High Availability as well as Auto-Scaling to deal with high demand.; *Redundancy/High Availability: The Azure cloud infrastructure itself is designed for high availability.; *Auto-Scaling: Web services run on an automatically scalable infrastructure that provisions additional web server instances if needed. Geneyx Analysis pipelines leverage Azure Batch services for scalability. Execution requests are queued and distributed across predefined worker nodes to optimise performance and throughput.; *In addition, customers can be prioritised at no extra cost. If this is required, customers are advised to contact the Support Team for assistance.

Analytics

• Service usage metrics: Yes
• Metrics types: The following service metrics are available covering:; - Secondary/tertiary analysis processing times; - QC Metrics (secondary pipelines): Sequence data quality and coverage across target regions including total number of positions captured, number of positions not meeting QC requirements, number of mapped positions, number of correctly aligned positions, number of correctly paired positions, count of captured positions, mean sequence coverage, percentage of positions covered at >5X/20X/50X, and other gene coverage metrics; - Utilisation tracker for specific analysis workflows ; - Distribution tracker for samples processed using secondary pipelines; - Usage tracker for analysis protocols; - Identification of periods of high analysis activity
• Reporting types: Real-time dashboards
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with CSA CCM v4.0
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Data Erasure

Data importing and exporting

• Data export approach: Users can download their data via the API or the graphical user interface. Should this not be possible, users can request assistance from the Geneyx Support Team. Files available for download include .vcf files, .tsv files for variant calls and BAM. In addition, users can obtain report files in .json, .pdf and .csv formats as well as QC files in .csv format for their samples.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • .tsv
  • .json
  • .pdf
  • .vcf
  • .bam
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Json
  • Vcf
  • FASTQ

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The uptime of Geneyx Analysis is historically 99.9%. Geneyx guarantees users a service level uptime of 99.5% and continuously optimises availability to meet/exceed availability. Should an unexpected incident occur, Geneyx will work with users to resolve issues as quickly as possible and keep the emergency downtime restricted to “out of hours” where possible. ; In the event of a breach of a service level availability guarantee, Geneyx will pay users a service credit based on a mutual Service Level Agreement. In the event where the same service level breach occurs in three consecutive months, users can terminate the agreement with no liability/obligation/penalty, and Geneyx will pro-rata refund all prepaid fees. ; Occurrences not part of a guaranteed service availability include incorrect use of Geneyx Analysis, internet connectivity/network traffic issues at the user’s site, user failure to meet the minimum hardware/software requirements, Force Majeure events or scheduled downtime. ; Users can request regular service availability reports including a summary of whether the service performance has met/exceeded/failed the availability requirements during the reporting period, a description of the cause of a failure and the corrective actions taken to ensure the availability requirements are met in the future.
• Approach to resilience: Geneyx Analysis is located on the Azure cloud which provides the following service resiliency: ; • Redundancy and High Availability: The Azure cloud infrastructure is inherently resilient and designed for high availability thereby minimising the risk of service interruptions. ; • Auto-Scaling: Web services run on an automatically scalable infrastructure that provisions additional web server instances as demand increases. Geneyx Analysis pipelines (annotation and secondary pipelines) leverage Azure Batch services for scalability. Execution requests are queued and distributed across predefined worker nodes to optimise performance and throughput. ; • Disaster recovery: All storage resources, including databases and files, are regularly backed up by the cloud infrastructure. Restore procedures are tested multiple times annually to ensure readiness. ; • Circuit Break Patterns: The service is safeguarded by a Web Application Firewall (WAF), enabling continuity even during cyberattack scenarios (DDoS Protection). ; • Health Monitoring: All resources are actively monitored using Azure best practices to maintain optimal health and performance.
• Outage reporting: System resources are continuously monitored for outage using cloud resource monitoring. Upon an incident, the CTO (Chief Technology Officer) together with the Cloud Team is notified by email through the system so that the issue can be investigated immediately. The actual system state is also visible to the Geneyx Support Team via several dashboards:; 1. Within the Geneyx Analysis software for status display of pending jobs as well as entry point for keep-a-live. ; 2. Via the cloud-based Application Insights Service for visualisation of live issues.; In case of any outages that are not detected internally or have not been planned/communicated (i.e. for software upgrades), customers are advised to contact the Geneyx Support Team for assistance.; Should any unforseen outages occur that are expected to last for a longer period of time (for instance issues with the Azure cloud), Geneyx will keep customers informed about the progress through the Support Team until the issue is resolved.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Users are required to login to access Geneyx Analysis using multi-factor authentication. Access levels are controlled as follows:; 1. At the account level, account admins define roles and permissions for users within the account. This defines the operation levels for users. ; 2. Account managers define groups associated with sample-derived data thereby controlling who can access the data regardless of their roles/permissions.; Users can access Customer Support either by email or through the website. Customer Support will reply by email. Case handling will be prioritised based on the priority order classification of the enquiry.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: ISO27799; ISO13485
• Information security policies and processes: Geneyx complies with relevant laws and regulations related to information security. Our Information Security Policy as well as ISO27001 and ISO27799 related policies are regularly reviewed, versioned, updated and audited. The policies apply to all employees, contractors, vendors, and other parties with access to Geneyx's information resources. Information systems are also continuously monitored for security incidents. The policies cover the following:; - ISO27001 and ISO27799 related requirements; - Data classification; - Data handling and storage procedures; - Data access and access levels; - Authentication mechanisms; - Data encryption during storage and transmission; - Firewalls and intrusion detection/prevention systems; - Physical access controls to restrict entry to facilities where information assets are stored ; - Ongoing security awareness programs and training for employees; - SOPs focusing on reporting and dealing with security incidents ; ; Any incidents are reported to the CISSP/CTO. This is logged and categorised within the incident management system, and managed according to the ISO27001 process. Every six months, the company's CISSP issues a dedicated mandatory assessment intended to verify compliance with the organization's information security requirements.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Change management process/configuration is based on ISO13485/ISO27001 requirements and follows planning, implementation, change monitoring, impact/risk assessments for product safety (ISO13485) and security (ISO27001), product release.; Planning: For each release, features/bug-fixes are prioritised and version-specific requirements/relevant documentation is created.; Implementation: Requirements are split into sprints with defined tasks for development/testing. Verification, validation and acceptance testing is followed by sanity/regression testing/clinical validation against set specifications and relevant impact and risk assessments before sign-off.; Product release: Deployments are automatically performed and tracked in release documents. Release notes detailing the changes and relevant user documentation updates are made available to users upon release.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Our vulnerability management process follows ISO 27001 Annex A controls (A.8.8/ A.8.9/A.12.6).; We perform periodic vulnerability scanning (internal/external), patch management, remediation tracking, and risk-based prioritisation, utilise industry tools (i.e. Nessus for external surface; ManageEngine Desktop Central for endpoint , Azure cloud-native scanners) and follow OWASP/NIST guidelines.; Public-facing environments are scanned at least monthly/after major changes. Internal systems are assessed as part of ongoing IT operations/configuration-hardening. Findings are reviewed by IT/security and entered into risk/remediation tracking processes.; In addition, authoritative sources such as Vendor Security Advisories, Security mailing lists and alerts generated by our vulnerability scanners/cloud platforms are monitored continuously.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Geneyx complies with Supplier-Defined Protective Monitoring Controls in accordance with ISO 27001:2022 – Annex A (A.5.7, A.8.16, A.8.20). Our protective monitoring approach includes centralized logging across servers, cloud workloads, and applications, continuous monitoring of security events using security reports, alerting for suspicious or anomalous behaviour (endpoints and cloud), monitoring of authentication events, admin activities, and network traffic, and regular review and retention of audit logs. We also use defender on the cloud to automatically handle any security issue.; Incidents, if not automatically handled, are documented and prioritised for mitigation based on severity.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: The incident management process is defined as part of the ISO 27001 process. It covers security, data loss and any related types of incident. Employees report incidents to the CISO/CTO. This is logged and categorised within the incident management system, and managed according to the ISO27001 process. Users can report incidents through Customer Support/their dedicated Field Application Specialist, who follow the process above.; The incident management protocol covers logging, process tracking, resolution provision and specification of protective actions for the future. In case of customer related incidents, a report including the information described is shared with customers via Customer Support.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Users can register at https://analysis.geneyx.com/#/ for access to a free trial version for a period of 18 months. This includes the analysis of 5 samples (tertiary analysis only) of their choosing. In contrast to an extended evaluation this free trial version does not include training or FAS support.
• Link to free trial: https://analysis.geneyx.com/#/

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 10%
• Between £250,000 and £500,000: 20%
• Between £500,001 and £1,000,000: 25%
• Between £1,000,001 and £2,500,000: 30%
• Between £2,500,001 and £5,000,000: 30%
• Over £5,000,001: 30%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: IQC - Institute of Quality & Control
• ISO/IEC 27001 accreditation date: Monday 20 October 2025
• What the ISO/IEC 27001 doesn’t cover: Clinical interpretation service
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: Yes
• Any other security certifications:
  • ISO 13485
  • ISO27799

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@geneyx.com. Tell them what format you need. It will help if you say what assistive technology you use.