A SATRE Compliant Trusted Research Environment

Why is it important?

Before SATRE, there was no common standard against which TRE providers could be assessed. A data custodian evaluating platforms had no consistent framework for comparing security claims, governance approaches, or operational capabilities across providers - whether commercial or open source, managed or self-maintained.

That matters because the consequences of getting it wrong are significant. Sensitive health data, personal records, and proprietary research datasets all depend on the environments that hold them being genuinely trustworthy and not just compliant on paper.

SATRE addresses this by providing an open specification that any Trusted Research Environment provider can evaluate themselves against. It covers not just the technical infrastructure but the full range of capabilities required to run a TRE responsibly such as information governance, data management, and the supporting services that determine whether a platform is sustainable and usable in practice, not just secure in principle.

Transparency

Self-improvement

Many of the capabilities outlined in SATRE have been core to the Aridhia DRE from the beginning, shaped by real-world requirements from research hospitals, global consortia, and pharmaceutical organisations working with highly sensitive health data. In that sense, the specification reflects much of what we have learned over more than fifteen years of building and operating secure research environments.

But the value of a standard like SATRE is not simply in confirming what a provider already does well. It surfaces gaps, where requirements have evolved, where the expectations of data custodians and researchers have moved ahead of existing practice, or where the specification identifies controls that had not previously been formalised. Each annual assessment gives us a structured opportunity to identify those gaps and address them.

It also keeps us honest. Self-assessment against a published standard, with the results made public, creates accountability that internal review alone cannot. Our score improves because the platform improves, and the platform improves because the score is published.