Trust Center
Discovery Life Sciences is a global bioanalytical
and biospecimen services company trusted by
pharmaceutical, biotechnology, and medical device
clients worldwide. Protecting the integrity,
confidentiality, and availability of our clients'
data is fundamental to everything we do.
Our information security program is aligned with
ISO 27001, SOC 2, and NIST frameworks, and
we are proud to have successfully completed our
SOC 2 Type II audit —
a reflection of the maturity and effectiveness
of our security controls across our global operations.
This Trust Center provides transparency into our
security posture, compliance program, and available
documentation. Sensitive reports and supporting
materials are available to clients and qualified
prospects under NDA — please submit an inquiry
or click Get Access to begin your security review.
Self-Assessments
Discovery Life Sciences actively responds to client and prospect security assessments including SIG, CAIQ, and custom vendor questionnaires. Completed assessments and supporting documentation are made available under a executed NDA. To initiate a request, please submit an inquiry through this Trust Center. Our security team typically responds within 2–3 business days.
Trust Center Updates
Security Advisory: Protecting Customer Data from Emerging Social Engineering Threats
Discovery Life Sciences is actively monitoring the increased use of social engineering, phishing, identity-based attacks, and abuse of trusted collaboration platforms targeting organizations across multiple industries.
These campaigns may attempt to impersonate trusted business contacts, executives, IT support personnel, financial institutions, or technology providers in order to obtain credentials, authentication approvals, sensitive information, or unauthorized payments.
Our Information Security team continues to monitor emerging threat intelligence and has implemented multiple layers of protection designed to reduce the risk of unauthorized access, including:
Phishing-resistant multi-factor authentication for sensitive and privileged access
Microsoft 365 anti-phishing, impersonation, spoofing, and post-delivery protections
Endpoint detection and response across managed systems
Security monitoring and centralized event analysis
Vulnerability and patch management
Conditional Access and identity-based security controls
Data loss prevention and sensitive-data monitoring
Restricted administrative access and privileged account protections
Employee security-awareness and phishing training
Ongoing review of third-party, cloud, and supply-chain risks
Incident-response processes designed to rapidly investigate and contain suspicious activity
We continually evaluate our security controls as the threat landscape evolves and adjust protections when new risks are identified.
Protecting customer and research data remains a core responsibility of Discovery Life Sciences. Our security program is designed around layered controls across identity, endpoints, cloud infrastructure, networks, applications, and data. We continuously monitor emerging threats and update our defensive controls to help maintain the confidentiality, integrity, and availability of information entrusted to us
Discovery Life Sciences maintains a security program aligned with recognized industry frameworks and standards, including SOC 2 Type II, ISO 27001-aligned practices, and NIST security principles. Our Trust Center provides additional information regarding our security, privacy, compliance, infrastructure, and incident-response practices.
Customers who have questions regarding our security program or require additional security documentation may submit a request through the Discovery Life Sciences Trust Center.
Security Posture Enhancement in Response to Emerging AI Threat Intelligence
Discovery Life Sciences continuously monitors the evolving threat landscape, including risks introduced by the rapid adoption of AI technologies across the industry.
In response to recently published AI security research — including threat modeling work from leading AI safety organizations — Discovery has taken the following proactive steps to strengthen its security posture:
- AI Usage Policy — Formal policy governing approved and prohibited uses of generative AI tools across the organization has been established and communicated to all staff
- Data Loss Prevention (DLP) — Controls have been reviewed and updated to detect and prevent sensitive research or client data from being submitted to external AI platforms
- Vendor AI Risk Assessment — Third-party vendors leveraging AI in their products or services are now subject to additional security scrutiny during onboarding and annual review
- Security Awareness Training — Staff training has been updated to include AI-specific threat scenarios including prompt injection, data leakage via AI tools, and social engineering using AI-generated content
- Monitoring & Detection — Microsoft Sentinel rules have been tuned to flag anomalous behavior consistent with AI-assisted attack patterns
Discovery Life Sciences remains committed to transparent, proactive communication regarding our security program. Questions may be directed to our security team via this Trust Center.