DNANEXUS TRUSTED RESEARCH ENVIRONMENT (TRE)

USER ACKNOWLEDGEMENT AND ACCEPTABLE USE POLICY

IMPORTANT NOTICE: You are attempting to log into a secured Trusted Research Environment (“TRE”) powered by DNAnexus. This environment contains proprietary, sensitive, and strictly regulated omics files, biometric datasets, clinical information, and related materials uploaded or managed by a primary institutional subscriber (“TRE Manager”) (collectively, “TRE Data”). Your access is subject to continuous security monitoring, logging, strict data handling restrictions, and financial consumption liability.

By accessing and/or using the TRE, you legally bind yourself and your sponsoring institution (or employer) to the terms below.

1. Restricted Posture and Prohibited Data Exfiltration. The TRE operates under a strict, conditional controlled egress security model. You agree to comply with all the restrictions of the TRE set forth by the TRE Manager, including, any applicable data use agreements. You are explicitly prohibited from extracting data from this environment.
1. No Downloading or Copying You shall not copy, transmit, save, or download any raw TRE Data, omics files, or underlying computational workflows out of this environment.
2. Prohibited Methods. This restriction applies to all extraction methods, including, but not limited to, the Web UI, DNAnexus APIs, Client Software command-line scripts, automated web scraping, or third-party platform integrations.
3. Visual Capture Prohibited. You are strictly prohibited from bypassing technical controls through secondary methods, such as taking photographs of your screen, recording videos, or executing manual transcriptions
4. Output Governance. You may only export high-level (e.g., aggregated and anonymized) analytical results or summary statistics if explicitly permitted by the TRE Manager.
2. Governing Data Agreements and Data Rights Hierarchy. Your permission to interact with the TRE Data is strictly downstream of the authorization granted to you by the TRE Manager.
1. Data Use Rights Agreements. You acknowledge and agree that your rights, restrictions, permissions, and specific obligations with respect to the TRE Data are governed by this acceptable use policy and any separate, applicable data use agreement, material transfer agreement, or institutional collaboration contract entered into directly between the TRE Manager and you or your sponsoring organization (“Data Use Agreement”), if any.
2. DNAnexus Neutrality. DNAnexus is not a party to any such Data Use Agreement. DNAnexus shall have no liability, monitoring obligations, or enforcement duties regarding disputes over data ownership, usage rights, or permissible research scopes arising between you and the TRE Manager.
3. Computational Usage and Consumption Fees. All cloud infrastructure, computational processing, and data storage resources utilized by your account within the TRE generate real-world operational expenses (“Consumption Fees”).
1. User and Institutional Liability. Except where the TRE Manager or your own underlying employer/sponsoring organization has entered into a separate, valid agreement with DNAnexus explicitly accepting financial responsibility for your specific usage and consumption (e.g., computational actions,) you (individually) and your sponsoring organization (jointly and severally, to the extent you are an authorized representative) shall be fully responsible for paying all Consumption Fees incurred by your activities within the TRE.
2. Billing Rates. Any such independent usage and computational processing will be billed directly to you or your organization at DNAnexus’ then-current market standard utility rates.
4. Promotional Credits and Free Trials. DNAnexus or the TRE Manager may from time to time, but are under no obligation to, provision discretionary, non-monetary promotional credits or free trial parameters for use within the TRE (“Trial Credits”).
1. Absolute Discretionary Revocation. You explicitly acknowledge and agree that Trial Credits are discretionary incentives, hold no cash value, and do not constitute a paid service or a vested property right. Any Trial Credits extended to you may be altered, limited, suspended, or revoked at any time in the absolute discretion of the party funding or providing those credits (whether DNAnexus or the TRE Manager), without prior notice, liability, or the requirement to establish cause.
2. Transition to Paid Consumption. Upon the expiration, depletion, or revocation of any such Trial Credits, you acknowledge that any continuous or remaining processing, computation, or storage executed by your user profile will immediately accrue standard Consumption Fees in accordance with Section 3, for which you and your sponsoring organization shall remain financially responsible. Failure to promptly transition to a paid account tier will result in immediate suspension or revocation of access. Continued failure to resolve billing requirements may result in the permanent deletion of your data and assets without further notice or liability.
5. Mandatory Security and Credential Safeguards.
1. No Credential Sharing. Your login credentials, multifactor tokens, API tokens, and access keys are strictly personal. You must never share them with colleagues, assistants, or any third party.
2. Multi-Factor Authentication (MFA). You must maintain active MFA enabled on your account at all times.
3. Immediate Notification. You must immediately contact support@dnanexus.com if you suspect your account, credentials, or computing environment have been compromised. You are recommended to immediately change your password from a trusted computer.
4. Secure Computing Environment. You agree to exclusively access the TRE from a secured environment that leverages industry standard protections such as antivirus/antimalware software, network firewalls, and contains the latest operating system and web browser patches.
6. Continuous Compliance Logging and Forensic Monitoring.
1. Immutable Tracking. DNAnexus may log any and/or all platform interactions, including login history, API calls, executed terminal commands, file access logs, and export attempts
2. Log Retention. To the extent that DNAnexus logs any such data, these audit trails are stored in an unalterable manner for a minimum period of one (1) year and are available to the TRE Manager and regulatory bodies for forensic auditing purposes.
7. Direct Acceptable Use Policy (AUP) Restrictions. In addition to the TRE data boundaries, your operational conduct inside the platform must strictly conform to the global DNAnexus Acceptable Use Policy. You expressly agree that you shall not:
1. Use the Service to store or transmit infringing, libelous, or otherwise unlawful material, or violate third-party privacy or intellectual property rights.
2. Introduce, store, or transmit malicious code, malware, worms, Trojan horses, or viruses into the platform.
3. Interfere with, bypass, or disrupt the performance, security controls, monitoring controls, or overall integrity of the Service.
4. Attempt to gain unauthorized access to other projects, data directories, or user environments that have not been explicitly provisioned to you.
5. Perform or execute any network discovery, port scans, service identification, vulnerability scanning, programmatic penetration testing, or denial-of-service simulations.
6. Reverse engineer, decompile, disassemble, or attempt to extract the source code or non-public APIs of the DNAnexus platform software.
8. Disclaimer of Warranties.
1. Data Accuracy Disclaimer. THE TRE AND ALL COMPONENT PARTS THEREOF, INCLUDING ALL SERVICES, COMPUTATIONAL UTILITIES, AND SYSTEM PLATFORMS, ARE PROVIDED TO YOU ON AN "AS IS" AND "AS AVAILABLE" BASIS.
2. Third-Party Customer Data. DNANEXUS DOES NOT CONTROL, OPERATE, VET, PRESERVE, OR WARRANT THE ACCURACY, CONTENT, COMPLETENESS, SUITABILITY, INTEGRITY, OR LEGALITY OF ANY TRE DATA UPLOADED TO THE PORTAL BY THE TRE MANAGER OR OTHER EXTERNAL CONTRIBUTORS.
3. No Validation. DNANEXUS EXPLICITLY DISCLAIMS ALL LIABILITY ARISING FROM DECISIONS MADE, ANALYSES PERFORMED, OR RESEARCH CONCLUSIONS DEVELOPED BASED ON DATA, ALGORITHMS, OR RESULTS DERIVED WITHIN THE TRE PORTAL.
9. User and Institutional Indemnification. To the maximum extent permitted by applicable law, you (individually) and your sponsoring organization (jointly and severally, to the extent you are an authorized representative) agree to indemnify, defend, and hold harmless DNAnexus, its affiliates, directors, and cloud infrastructure providers from and against any and all third-party claims, liabilities, losses, damages, fines, and costs (including reasonable attorneys' fees) arising out of or relating to: (a) Your breach of this Agreement, the DNAnexus AUP, or any applicable local, state, national, or international law or regulation; (b) Any misuse or unauthorized exfiltration of TRE Data by your account coordinates; and/or (c) Any dispute regarding data rights or breach of data permissions occurring between you, your sponsoring organization, and the TRE Manager (including any claims that your utilization of the data violated a Data Use Agreement or infringed upon patient privacy/consent thresholds).
10. Limitation of Liability.
1. 10.1.Waiver of Certain Damages. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL DNANEXUS OR ITS THIRD-PARTY INFRASTRUCTURE PROVIDERS BE LIABLE TO YOU OR YOUR SPONSORING INSTITUTION FOR ANY INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES, INCLUDING LOSS OF PROFITS, LOSS OF RESEARCH REVENUE, INTERRUPTION OF BUSINESS, DATA CORRUPTION, OR THE COSTS OF PROCURING SUBSTITUTE UTILITIES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH LOSSES.
2. 10.2.Direct Damages Cap: TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, DNANEXUS’ MAXIMUM AGGREGATE LIABILITY TO YOU AND YOUR SPONSORING INSTITUTION FOR ALL CLAIMS ARISING OUT OF OR RELATING TO YOUR UTILIZATION OF THE TRE ENVIRONMENT SHALL NOT EXCEED ONE HUNDRED US DOLLARS ($100.00 USD).
11. Immediate “Kill Switch” Suspension. DNAnexus and the TRE Manager reserve the absolute right to instantly terminate your access session and suspend your account coordinates without prior notice and without remedy if an active security anomaly, compromised credential vector, or an AUP violation is detected or reasonably suspected.

ACKNOWLEDGEMENT AND AGREEMENT. By accessing and/or using the TRE or DNAnexus platform, I confirm that I am an authorized user registered under an active institutional framework.

By accessing and/or using the TRE or DNAnexus platform, I confirm that I have read, understood, and agree to be legally bound by this DNAnexus TRE User Acknowledgement and Acceptable Use Policy, the consumption fee liabilities, the credit revocation rules, the data rights limitations, the warranty and indemnification obligations, and the global DNAnexus Acceptable Use Policy.