Product Security Updates

Product security policy statement

Striving to build products that are secure by design, in use, and through collaboration.

Policy statement

We value the confidentiality, integrity, and availability of all protected health and personally identifiable information (e.g., PHI, PII)  in accordance with applicable international, national, and state security laws, including the Health Insurance Portability and Accountability Act (HIPAA) and the General Data Protection Regulation (GDPR).

At Terumo Blood and Cell Technologies, we have implemented administrative, technical, and physical safeguards to reasonably protect our products and systems. As systems evolve, we recognize that new vulnerabilities can arise and we welcome your help in identifying them. If you believe you have identified a potential product‑related security issue (such as a vulnerability, breach, or incident), we invite you to report it here. We will investigate your report and, where appropriate, address the matter through our coordinated vulnerability disclosure process.

We are committed to providing secure products to our customers given the important benefits they provide to patient and donor health. We continuously strive to improve security through the product lifecycle using the following practices where appropriate:

• Security by design
• Product and supplier risk assessment
• Vulnerability and patch management
• Secure coding practices and analysis
• Vulnerability scanning and third-party testing
• Access control to customer data
• Incident response