Linking Patient Data to Discovery – the BioGrid Aridhia Digital Research Environment 

The need for strong cyber security is now a fact of life for any organisation that is collecting, storing or using clinical data. Increased malicious data breach activity along with global movements in research data access requirements means security around clinical data is more urgent than ever.

Trusted Research Environments (TREs) are therefore set to become a key part of addressing this need for reliable security among large research programs.

Last year, the National Institutes of Health (NIH) in the United States released new requirements for transferring research data to collaborators outside NIH. A TRE equivalent to NIST SP 800-171 (or ISO 27001) is required even before signing a Material Transfer Agreement (MTA) or Data Transfer Agreement (DTA).

If those requirements aren’t met, the data cannot be received. This has caused significant issues for genomic analysis — even for standard of care within Australia — because of a lack of suitable Trusted Research Environments.

Data tracking is similarly critical. For example, it was discovered that data for the 500,000 participants impacted by the UK Biobank data breach in April 2026 had been on sale in China and on the dark web. TREs will most likely be the only environments suitable for secure large scale data analysis on data sets like this in the future. The UK government clearly agrees and has invested in TREs across the country.

The Aridhia Digital Research Environment (DRE) is one of the few available in Australia that incorporates a TRE. The Aridhia DRE is ISO 27001 Information Security Management certified, ISO 27701 GDPR Privacy Information Management certified, and has additional health-data certifications such as HITRUST and Cyber Essentials Plus, providing the highest levels of data security and privacy protection suitable for sensitive clinical and genomic data.

In addition, the platform's architecture has been benchmarked against the UK SATRE (Standardised Architecture for Trusted Research Environments) specification, demonstrating that it meets contemporary secure research environment design expectations.

The Snow Centre for Immune Health has an ambitious aim – to use a whole-of-system approach to research, by directly extracting immune cells from blood samples from thousands of participants, both healthy and those with immune disorders, to assess their unique genetic and functional fingerprints using cutting-edge immunology methods. This shift will enable researchers to measure the health of intricate immune processes across various scales and accelerate discovery of the causes and treatments of immune disease.

The program targets rapid development of new diagnostics and therapies, requiring a dedicated team of researchers and clinicians to work side by side. At the outset there is strong clinical involvement and access to patients experiencing immune diseases through specialist clinicians at the Royal Melbourne Hospital.

When data is collected by Snow Centre clinicians and clinical researchers, BioGrid runs a de-identification process that brings the de-identified data onto the BioGrid Aridhia platform. Information from samples taken from patients for deep immune phenotyping is also stored on the OpenSpecimen platform in a de-identified form.  This allows researchers at WEHI to undertake analysis on high-performance computing linked only via a unique Snow Centre ID linkage, that also allows the analysis to be securely returned to clinician researchers via the Aridhia platform.

Importantly, the BioGrid Aridhia DRE is outward-facing, which means Snow Centre researchers can collaborate with external researchers — for example, immunology researchers at Cambridge UK — and bring their data in for secure analysis.

For the Snow Centre, the BioGrid Aridhia DRE will handle EPIC data, REDCap data, the WEHI OpenSpecimen platform and WEHI Research Computing — all subject to different data-security requirements.

Use of clinical data for research in Australia falls under the Privacy Act (Section 95A) and the Office of the Australian Information Commissioner’s privacy principles, reflected in the Victorian information-privacy principles, and must be managed accordingly. De-identified specimen trafficking and research are required. Ultimately all of this needs to be brought together and the only way to do that securely is through a TRE.

The BioGrid Aridhia DRE has been tested with the Intrepid dataset — a Cambridge UK dataset for primary immunodeficiency diseases — in collaboration with Professor Paul Lyons, one of the scientific leads for the Snow Centre.

The Intrepid program is a multi-site study collecting clinical information that can be used with deep phenotyping for analysis of immunodeficiencies. BioGrid was able to bring it onto the Aridhia DRE relatively easily and run analyses within the platform.

All activity on the BioGrid Aridhia DRE — both data import and data export — is logged, providing a complete audit trail for every action performed on the data. The platform is secure cloud-based and can now be integrated with on-premises high-performance computing. Analytics can also be run with R and Jupyter Labs and other tools, including Biomni — a Large Language Model (LLM)-driven bioinformatics platform — within the BioGrid Aridhia platform[AN1] . That means the data doesn’t need to be transported anywhere else - the researchers come to the data.

For the Intrepid dataset, the BioGrid Aridhia DRE offers file areas, areas for database tables, areas for applications, and the ability to spin up virtual machines in the Azure cloud. This all means that the de-identified data remains contained within the BioGrid Aridhia DRE environment, providing peace of mind for both researchers and the patients who have contributed their information.

TREs are the future of how researchers will use and interact with clinical data and the Snow Centre’s use of the BioGrid Aridhia DRE will be a valuable case study in the power, security and flexibility of these research environments, particularly for enabling collaborations that are not limited by geographical restrictions.

BioGrid is pleased to be leading this work in Australia and will soon be offering BioGrid members the opportunity to access this technology.

In a secure trusted research environment such as the BioGrid Aridhia DRE, global discovery is possible.