Skip to main content

FutureLink Barcelona (6-8 October) is now open for registration. Sign up today!

Close
Home
Clear Search
User Log In
  • Tracelink Classic
    TraceLink Classic app.tracelink.com
    Redirect
  • Opus Platform
    Opus Platform opus.tracelink.com
    Redirect
  • Supply Chain Orchestrations
    Left fast
    Supply Chain Orchestrations
    • Life Sciences Company

      Life Sciences Company

      Life sciences companies face distinct challenges in orchestrating supply chains with partners. TraceLink specializes in addressing and overcoming these challenges.
      Learn More
      Left fast
      Life Sciences Company
      • Orchestrating the supply chain
        • Life Sciences Company
        • Direct Material Supplier
        • Contract Manufacturer
        • Third Party Logistics
        • Wholesale Distributor
        • Healthcare Provider
        • Retail Pharmacy

      Related Content

      Learn More
      Life Sciences

      Products

      Explore products for life sciences companies.

      Learn More
      Life Sciences

      Resources

      Discover valuable insights and industry trends.

    • Direct Material Supplier

      Direct Material Supplier

      Direct material suppliers face unique challenges in supply chain coordination. TraceLink provides specialized solutions to address and overcome these issues.
      Learn More
      Left fast
      Direct Material Supplier
      • Orchestrating the supply chain
        • Direct Material Supplier
        • Life Sciences Company
        • Contract Manufacturer
        • Third Party Logistics
        • Wholesale Distributor

      Related Content

      Learn More
      Direct Material Supplier

      Products

      Explore products for direct material suppliers.

      Learn More
      Direct Material Supplier

      Resources

      Dive into a world of expert resources and cutting-edge industry knowledge.

    • Contract Manufacturer

      Contract Manufacturer

      Contract manufacturing organizations grapple with distinct supply chain complexities. TraceLink delivers innovative solutions to tackle and streamline these challenges.
      Learn More
      Left fast
      Contract Manufacturer
      • Orchestrating the supply chain
        • Contract Manufacturers
        • Life Sciences Company
        • Direct Material Supplier
        • Third Party Logistics

      Related Content

      Learn More
      Contract Manufacturer

      Products

      Explore products for contract manufacturers and contract packagers.

      Learn More
      Contract Manufacturer

      Resources

      Get insights and industry trends for contract manufacturers and packagers.

    • Third Party Logistics

      Third Party Logistics

      Third party logistics providers face unique challenges in managing intricate supply chains. TraceLink offers strategic solutions to effectively address these complexities.
      Learn More
      Left fast
      Third Party Logistics
      • Orchestrating the supply chain
        • Third Party Logistics
        • Life Sciences Company
        • Contract Manufacturer
        • Wholesale Distributor

      Related Content

      Learn More
      Third Party Logistics

      Products

      Browse our range of products for third party logistics providers.

      Learn More
      Third Party Logistics

      Resources

      Step into our resource hub for the latest in innovation and industry expertise.

    • Wholesale Distributor

      Wholesale Distributor

      Wholesale distributors navigate complex challenges in supply chain management. TraceLink provides advanced solutions to efficiently tackle these issues.
      Learn More
      Left fast
      Wholesale Distributor
      • Orchestrating the supply chain
        • Wholesale Distributor
        • Life Sciences Company
        • Healthcare Provider
        • Retail Pharmacy

      Related Content

      Learn More
      Wholesale Distributor

      Products

      Browse our range of products for wholesale distributors.

      Learn More
      Wholesale Distributor

      Resources

      Navigate the future of industry trends with our wholesale distributor resource center.

    • Healthcare Provider

      Healthcare Provider

      TraceLink provides specific solutions to help healthcare providers confront distinct challenges, including managing drug shortages and recalls in their supply chains.
      Learn More
      Left fast
      Healthcare Provider
      • Orchestrating the supply chain
        • Healthcare Provider
        • Life Sciences Company
        • Wholesale Distributor

      Related Content

      Learn More
      Healthcare Provider

      Products

      View our product portfolio for healthcare providers.

      Learn More
      Healthcare Provider

      Resources

      Explore our comprehensive collection of resources for healthcare providers.

    • Retail Pharmacy

      Retail Pharmacy

      Retail pharmacies combat supply chain complexities, including regulatory compliance. TraceLink enhances efficiency and adherence.
      Learn More
      Left fast
      Retail Pharmacy
      • Orchestrating the supply chain
        • Retail Pharmacy
        • Life Sciences Company
        • Wholesale Distributor

      Related Content

      Learn More
      Retail Pharmacy

      Products

      Experience our advanced product lineup for retail pharmacies.

      Learn More
      Retail Pharmacy

      Resources

      Delve into our rich library of resources for retail pharmacies.

  • Network
    Left fast
    Network
    The Advantage of Integrate Once
    The TraceLink Network
    Network

    Explore how a single connection to the TraceLink network can transform your operations, streamline your supply chain processes, and bring unparalleled value to your organization.

    Learn More

    Menu Divider

    • Tracelink Icon The Power of the Platform
    • Tracelink Icon OPUS Solution Environment
    • Tracelink Icon Link Actions
    • Tracelink Icon Reports and Dashboards
    • Tracelink Icon Master Data Exchange
    • Tracelink Icon Message Center
  • Products
    Left fast
    Products
    • Partner Orchestration

      Partner Orchestration

      Transform partner collaboration and rapidly connect with all your partners for enhanced control while reducing risks and costs to improve supply chain visibility and customer delivery performance.
      View All Products
      Left fast
      Partner Orchestration
      • Multienterprise Information Network Tower
        • MINT for External Manufacturing
        • MINT for Serialized Shipments and Receipts
        • MINT for Direct Supply
        • MINT for Logistics
        • MINT for Commerce
        • MINT for Transportation

      Related Content

      Learn More
      Blog

      Accelerate Clinical-Phase Commercialization Through Supply Chain Digitalization

      Discover four essential steps to accelerate clinical-phase commercialization through end-to-end supply chain digitalization.

      Watch Now
      Video

      Redefining Pharma Distribution

      Discover how industry leaders are redefining pharma distribution with digitalization, AI, and direct-to-provider models—driving visibility across the supply chain.

    • Product Orchestration

      Product Orchestration Products

      Meet regulatory requirements around the globe and improve operational efficiency with our suite of Product Orchestration solutions, tailored for comprehensive compliance and streamlined supply chain management.
      View All Products
      Left fast
      Product Orchestration
      • Serialization
        • Serial Number Exchange
        • Serial Number Manager
        • Serialized Operations Manager
        • Smart Event Manager
      • Smart Inventory Tracker
      • Targeted Recalls
      • Product Information Manager
        • Targeted Recalls Notification
        • Product Verification
        • Master Data Sharing
      • Country Compliance
        • US Drug Supply Chain Security Act
        • European Union Falsified Medicines Directive
        • Kazakhstan Pharmaceuticals
        • Kyrgyzstan Pharmaceuticals
        • See All Countries
      • Crypto Code
        • Russia Crypto Code

      Related Content

      Learn More
      Deadline Approaching

      DSCSA

      Comply with U.S. DSCSA requirements.

      Watch Now
      Video

      From DSCSA Compliance to Supply Chain Optimization for Pharmacy Efficiency

      Discover how DSCSA compliance foundation drives supply chain optimization and digital transformation to enhance pharmacy efficiency.

    • Process Orchestration

      Process Orchestration Products

      Streamline your supply chain with Process Orchestration, facilitating seamless collaboration on recalls, change requests, document reviews, compliance exception management, and more.
      View All Products
      Left fast
      Process Orchestration
      • Supply Chain Work Management
        • SCWM for Compliance Exceptions
        • SCWM for Incidents
        • SCWM for Change Requests
        • SCWM for Tasks
        • SCWM for Document Reviews

      Related Content

      Learn More
      Resources

      Supply Chain Collaboration

      Browse insights on how to improve end-to-end supply chain collaboration.

      Learn More
      Supply Chain Excellence Award

      2025 BSMA Supply Chain Management Innovation Award

      Gain insights into award-winning supply chain innovation—TraceLink wins the 2025 BSMA Supply Chain Management Innovation Award for its MINT solution.

    • Orchestration Intelligence

      Orchestration Intelligence Products

      Empower your supply chain decisions with Orchestration Intelligence, harnessing AI, machine learning, and the collective power of the TraceLink network for robust data-driven solutions.
      VIEW ALL PRODUCTS
      Left fast
      Orchestration Intelligence
      • Serialized Product Intelligence
      • Reports and Dashboards

      Related Content

      Learn More
      Reports and Dashboards

      Real-Time Insights with OPUS Reports & Dashboards

      TraceLink Releases OPUS Reports & Dashboards, the first end-user solution designed for real-time visibility into supply networks.

      Learn More
      Blog

      Explore the Top 10 Insights from LogiPharma 2025

      Discover how industry leaders at LogiPharma 2025 are transforming collaboration. Gain actionable strategies to drive business value across complex, global networks.

    • Network Platform-Enabling Products

      Network Platform-Enabling Products

      A comprehensive suite of solutions designed to empower users with advanced administration, communication, data management, and customization capabilities, coupled with services to extend the value of the platform.
      View All Products
      Left fast
      Network Platform-Enabling Products
      • OPUS Administer
      • OPUS Solution Environment
      • Link Actions
      • Master Data Exchange
      • Message Center
      • Automated Validation Manager
      • Healthcare Operational Services Team
      • Technical Account Management Services
  • Resources
    Left fast
    Resources
    • Resource Center

      Resource Center

      Explore our Resource Center for a wealth of knowledge, including videos, solution briefs, blogs, eBooks, and more, offering insights on TraceLink solutions, industry trends, and emerging topics.
      View All Resources
      Left fast
      Resource Center
      • By Segment
        • Life Sciences Company Life Sciences Company
        • Direct Material Supplier Direct Material Supplier
        • Contract Manufacturer Contract Manufacturer
        • Third Party Logistics Third Party Logistics
        • Wholesale Distributor Wholesale Distributor
        • Healthcare Provider Healthcare Provider
        • Retail Pharmacy Retail Pharmacy
      • By Type
        • Webinar Webinar
        • Blog Blog
        • Case Study Case Study
        • EBook EBook
        • Infographic Infographic
        • Podcast Podcast
        • Solution Brief Solution Brief
        • Video Video
        • Whitepaper Whitepaper
    • TraceLink University

      TraceLink University

      Enhance your expertise with TraceLink University: dive into a range of online and instructor-led courses, engaging tech talks, and certification programs designed to elevate your knowledge.
      Explore All
      Left fast
      TraceLink University
      • By Persona
        • Solution Designer Solution Designer
        • Tracelink Administrator Tracelink Administrator
        • User User
        • Orchestration Architect Orchestration Architect
        • Solution Partner Solution Partner
        • Technology Partner Technology Partner
      • By Orchestration
        • Manufacturing Manufacturing
        • Logistics Logistics
        • Commerce Commerce
        • Transportation Transportation
        • Clinical Supply Clinical Supply

      Related Content

      Learn More
      Subscriptions

      TraceLink University

      Ongoing education at your own pace.

      Watch Now
      FutureLink

      Experience FutureLink

      Watch FutureLink Barcelona sessions on demand.

    • Partners

      Partners

      We partner with leaders from across the globe, with an intense focus on partner companies that specialize in implementation, solution consulting, and application development.
      Partner Overview
      Left fast
      Partners
      • Tracelink Icon View Our Partners
      • Tracelink Icon Become a Partner
      • Tracelink Icon Access PartnerLink
      • Tracelink Icon OPUS Link Lab (OLL)

        Related Content

    • Community

      Community

      Join our global community, uniting members across the supply chain to share insights and engage in discussions through virtual meetings and collaborative workshops.
      Learn More
      Left fast
      Community
      • Global Compliance Special Interest Group
      • Multienterprise Information Network Tower Innovation Forum
      • U.S. DSCSA Innovation Forum for Manufacturers and Distributors
      • U.S. DSCSA Dispenser Innovation Forum
    • Events

      Events

      Stay updated with our Events calendar: from industry conferences we attend to exclusive events we host and informative webinars, join us in shaping the future of supply chain management.
      View All Events
      Left fast
      Events
      • Tracelink Icon Industry Events
      • Tracelink Icon Webinars
      • Tracelink Icon TraceLink Events

      Related Content

      Register Now
      FutureLink

      FutureLink Barcelona 2025

      Join the movement shaping the future of supply chains. FutureLink is the must-attend event for Industry leaders.

      Register Now
      Paris Seminar

      Intelligent Orchestration of Your End-to-End Supply Chain

      Explore how intelligent orchestration enhances resilience, agility, and performance on June 11 in Paris.

    • Customers

      Customers

      Meet a selection of our valued customers: discover how diverse businesses are leveraging TraceLink's solutions to transform their supply chains.
      View Our Customers
      Left fast
      Customers
      • Success Stories
        • Santen Santen
        • Merck Merck
        • Patheon Patheon
        • Sentara Sentara
        • Merz Therapeutics Merz Therapeutics
  • About
    Left fast
    About
    • Tracelink Icon Our Story
    • Tracelink Icon Newsroom
    • Tracelink Icon Culture and Careers
    • Tracelink Icon Leadership
    • Tracelink Icon Our Values
    • Tracelink Icon Corporate Social Responsibility

    Menu Divider

    Related Content

    Awards and Recognitions

    Celebrating our impact

    We are honored and proud of the acknowledgment and industry recognition we have received.

    Innovation Award

    Supply Chain Orchestration Company of the Year 2025

    Discover how TraceLink is transforming supply chain orchestration—named Supply Chain Orchestration Company of the Year 2025 by Logistics Tech Outlook Magazine.

  • CONTACT US
  • User Log In
    • Tracelink Classic
      TraceLink Classic app.tracelink.com
      Redirect
    • Opus Platform
      Opus Platform opus.tracelink.com
      Redirect
Close
CONTACT US
Security Annex

Breadcrumb

  1. Home

Security Annex

This TraceLink Security Annex supplements the executed written agreement between you, the Customer, and TraceLink, Inc. (the “Agreement”). In case of a conflict between this Security Annex and the Agreement, the Agreement shall prevail. Capitalized terms used herein that are not defined shall have the meaning set forth in the Agreement.

1. Security of Data Processing

TraceLink has implemented and will maintain technical and organizational measures inclusive of administrative, technical, and physical safeguards to ensure a level of security appropriate to the risk of the data processing for the products and services offered by TraceLink (“Services”) as described in this TraceLink Security Annex (the “Security Measures”). These Security Measures may be changed by TraceLink from time to time during the applicable Term of the Agreement in order to take into account advancements in available security technologies. However, TraceLink will not materially decrease the overall security of the Services during the then-current Term of the Agreement.

The Security Measures include, but will not be limited to, the following measures for ensuring the ongoing confidentiality, integrity, and availability of Customer Data in order to prevent unauthorized access, use, modification, or disclosure of Customer Data:

  1. maintenance of a comprehensive set of security and privacy policies, procedures, and plans that are reviewed on at least an annual basis and provide guidance to the organization regarding security and privacy practices;
  2. performance of background checks on all personnel, to the extent permitted by law, as well as signature of non-disclosure commitments and business ethics prior to employment;
  3. security awareness training, inclusive of acknowledgment and agreement to abide by organizational security policies, for all personnel upon hire and annually thereafter;
  4. encryption of Customer Data in transit and at rest utilizing industry-standard mechanisms;
  5. performance of backups and/or replication to meet the availability and integrity requirements, as well as test restoration capabilities to support recoverability; in accordance with documented procedures;
  6. logging and monitoring of security logs and alerting upon the detection of suspicious activity;
  7. processes and tooling for regularly identifying, assessing, and triaging vulnerabilities based on industry-standard guidelines;
  8. maintain a security incident response plan and readiness to support detection, containment, and remediation of security incidents, and promptly report any confirmed breach of TraceLink’s security procedures which results in unauthorized third-party access to Customer Data;
  9. processes for evaluating prospective and existing sub-processors to ensure that they have the ability and commitment to appropriate technical and organizational measures to ensure the ongoing confidentiality, integrity, and availability of Customer Data;
  10. a process for regularly testing, assessing, and evaluating the effectiveness of administrative, technical, and physical safeguards for ensuring the security of the processing, transmission, or storage of Customer Data through external and internal audits as further described in Section C below; and,

By implementing the Security Measures detailed above TraceLink takes into account the risks that are related to data processing, in particular the ones resulting from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored, or otherwise processed.

2. TraceLink Shared Responsibility Model

TraceLink Responsibilities

TraceLink is responsible for the confidentiality, integrity, and availability (the “security”) of the Services and internal TraceLink information technology systems. In addition to those measures detailed in “Security of Data Processing” above, Security Measures include, but are not limited to, server-level patching, vulnerability management, penetration testing, security event logging and monitoring, incident management, operational monitoring, and support and availability in accordance with any applicable TraceLink’s service levels.

TraceLink uses sub-processors for the Services and to support TraceLink as a processor of Customer Data. TraceLink shall remain fully liable for its sub-processors' acts and omissions relating to the performance of the respective Services and shall be responsible for ensuring that obligations under this Security Annex and the Agreement are carried out in accordance with both.

Customer Responsibilities

Customer is responsible for:

  1. security of its connection(s) to access the Services, the security of such link(s), and the security of any endpoints used to access the Services;
  2. account and access management associated with its employees, contractors, agents, trade partners, and data in accordance with Customer’s policies and procedures. This includes:
    • provisioning, modifying, and disabling its user accounts in a timely manner
    • managing role assignments associated with its accounts to ensure
    • ensuring appropriate authentication (via native sign-on settings provided with the Services or integration with separate single sign-on solution)
    • ensuring information sharing configured within the Services aligns with Customer’s business processes and policies for information classification, handling, and protection
  3. ensuring that all Customer's users comply with your obligations under this Security Annex and the Agreement in using TraceLink’s Services, and should you become aware of any violation of your obligations under this Security Annex and the Agreement caused by a Customer user, you will immediately suspend access to the Services by such user; 
  4. reporting to TraceLink, via email to security-alerts [at] tracelink.com, any potential or confirmed security incidents or identified vulnerabilities that may impact the Services; and
  5. ensuring any security testing of the Services is done with TraceLink’s written consent and in accordance with TraceLink’s policy, and in no way includes any unsolicited testing that would result in a denial of service (DoS) or any other harmful actions against the Services.

3. Third Party Audits, Certifications, and Testing

The Security Measures for TraceLink’s platform offerings are subject to periodic testing by independent third-party organizations, inclusive of the following audits, certifications, and assessments:

  • ISO 27001 and ISO 27017
  • SOC 2 / ISAE 3000 Type II
  • Penetration testing

TraceLink will provide evidence of independent review to Customer upon written request and under NDA. Such documents, and the information they contain, are TraceLink Confidential Information and must be handled by Customer accordingly. Such reports may be used solely by Customer to evaluate the design and operating effectiveness of defined controls applicable to the Services and are provided without any warranty.

Customer may perform its own external security testing of the Services in accordance with TraceLink’s written consent and TraceLink’s documented procedures. TraceLink offers its Services in the cloud using AWS and a one-to-many business model that relies on standardization of best practices and industry standards for the benefit of its Customers. It should be noted that AWS does not allow for physical audits of the AWS data centers but instead provides third party audits and certifications. It is for these reasons, among others, that TraceLink’s security program consists of the audits, certifications, and available documentation detailed herein as part of balancing transparency regarding the security and privacy safeguards that TraceLink has implemented, while also satisfying security and privacy requirements as part of security and privacy obligations to TraceLink Customers, and its sub-processors, including AWS.

Cookie Settings

When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies or similar tracking technologies. Please see below for an overview of the categories of cookies and similar technologies used on this site. You can allow or deny some of all of them, except Strictly Necessary Cookies which are required to provide the site to you. However, blocking some types of cookies may impact your experience of the site and services we are able to offer.

Please see our Cookie Policy for more details, including a list of the cookies we use. You can change your consent options at any time by following the “Cookie Settings” link in the Cookie Policy.
'Strictly Necessary' cookies let you move around the Site and use essential features like secure areas, shopping baskets and online billing. Without these cookies you would not be able to navigate between pages or use certain vital features of our Site, so we do not require your consent for their use. These cookies don't gather any information about you that could be used for marketing or remembering where you've been on the internet. For example, we use these Strictly Necessary cookies to identify you as being logged in to the Site. You can set your browser to block or alert you about these cookies, but if you do so, some parts of the Site will not work.
'Performance' cookies collect information about how you use the Site, such as which pages you visit, the time spent on the Site and if you experience any errors. We use performance cookies to provide aggregated statistics on how the Site is used and help us improve the Site including by measuring any errors that occur.
'Functional' cookies are used to provide services or to remember settings to improve your visit. We use 'Functionality' cookies to remember your settings and choices and show you when you're logged in to the Site.
‘Targeting' cookies are linked to services provided by third parties, such as 'Like' buttons and 'Share' buttons. The third party provides these services in return for recognizing that you have visited the Site. We also use 'Targeting' cookies to gather information that could be used to display content that we think may interest you.
Home

Footer

  • Quick Links
    Get a Demo
    Fast Facts
    The Network
    OPUS Platform
    Technical Support
    Open Jobs
    API: Terms of Use
  • Products
    Multienterprise Information Network Tower
    U.S. DSCSA Compliance
    Targeted Recalls
    Supply Chain Work Management
    Serialization
    Global Compliance
  • Resources
    Resource Center
    Events
    TraceLink University
    Partners
    Customers
    Community
  • About TraceLink
    Our Story
    Newsroom
    Culture & Careers
    Leadership
    Our Values
    Corporate Social Responsibility
  • Hot Topics
    Supply Chain Visibility
    DSCSA Compliance
    Supply Chain Collaboration
    Kazakhstan Compliance for Pharmaceuticals
    Kyrgyzstan Compliance for Pharmaceuticals
Follow Us on Social
Facebook
Linkedin
X
Legal & Trust.
© TraceLink Inc. 2009-2025 All Rights Reserved
Contact Us Today
Contact us today to digitalize your end-to-end supply chain for streamlined orchestration.
Contact Us
Stay Up-to-Date
Subscribe to receive industry insights and stay at the forefront of evolving trends.
Subscribe