The University of Manchester’s Secure Web Platform offers a robust, cloud-based solution for managing research and operational data that demands the most stringent protection.
Managed by the Highly Restricted Data Service who provide tailored guidance, platform development and support. The system is designed to securely host research applications, and to collect and share data within a security-hardened and continuously monitored infrastructure.
Utilising Amazon Web Services (AWS), the platform provides scalable computational resources—storage, processing, and memory—tailored to the specific needs of each research project. Resources are shared across projects where possible, ensuring cost-effective hosting.
The platform is ideal for mobile applications, such as those used by patients to upload symptom data or measurements from clinical devices. With the patient’s consent, this data can be securely shared with clinicians, researchers, policymakers, and other stakeholders. Since its launch in April 2023 the platform has expanded to support six research projects:
- REMORA project (REmote MOnitoring of Rheumatoid Arthritis): Focuses on improving care for people living with rheumatoid arthritis (RA) through a smartphone app that tracks daily symptoms and integrates the data into the NHS.
- BAY project: Aims to support young people with depression by helping them build confidence, connect with others, and increase activities that are important to them.
- AFFIRMO Project: Enhances the management of atrial fibrillation (AF) in older adults with multiple chronic conditions. It aims to develop a holistic care approach that considers personal preferences and social context.
- GRASS Project (Global Registry of Alopecia areata disease Severity and treatment Safety): Focuses on the severity and treatment safety of alopecia areata.
- CFHH Project (Cystic Fibrosis Health Hub): Uses a digital health platform to help patients maintain their treatment regimens, track medication use, receive reminders, and access educational materials, aiming to reduce exacerbations and improve lung function.
- VoiceIn Project: Supports young people in engaging with Patient and Public Involvement and Engagement (PPIE) opportunities through a digital platform, co-developed by a multidisciplinary team including young people, mental health researchers, and software designers.
The platform has been well-received by researchers and research software engineers, with more projects in the pipeline.
“The privacy and security of patient data are paramount to us. This is why we selected the Secure Web Platform to host the REMORA application. Certified by the University’s Information Governance office and designed to meet the stringent security criteria required for handling NHS patient data, this platform empowers us to confidently push the boundaries of our research, positioning us as the first university to integrate daily symptom tracking data into NHS electronic patient records at scale.”
Prof. Will Dixon (Principal Investigator REMORA)
The design and implementation of the platform involved many teams and colleagues from across the University, including colleagues from Research IT, ITS Security, ITS Identity and Access Management, the Information Governance Office and in its initial stages the Research Lifecycle Programme.
As the first large scale AWS utilisation offered by Research IT, the team has grown its Cloud capability and expertise. Key team members include Danielle Owen (Infrastructure Lead), Felix Edelsten (Technical Lead), Peter Crowther (Infrastructure Analyst) and Connor Main (Systems Administrator).
To bring the system into production the RIT team has implemented a comprehensive service wrapper including alerting, logging, access control, auditing and monitoring. In addition, the service benefits from:
- Multiple layers of security
- Penetration testing services
- Data encryption
- 24 x 7 monitoring and security operations support
- Secure data transfer capability with parties both inside and outside the University
- Automated health checks
- Automated deployment of patches and operating system upgrades
- Version control and roll-back of patches and operating system upgrades
- Bi-weekly clean implementation of platform software
- Re-usable patterns for quick platform deployment
- Utilisation measurement which drives on-going cost optimisation
- Various plans to suit different computational needs
Importantly, the platform is certified by the University’s Office of Information Governance to host highly restricted data, providing researchers with assurance that their data is hosted responsibly.
If your research project involves software applications that utilise highly restricted data, the Secure Web Platform could be the ideal solution for you. Contact the HRDS team to talk through your requirements.