Trust Center
Our commitment to quality, data privacy and security is embedded in every part of our business.
This Trust Center is your first port of call to answer your quality, data privacy and security questions relating to Instem and Instem's products/services.
Information on Instem's corporate Quality Management System (QMS) and Information Security Management System (ISMS) is detailed in the sections below.
To find information that is relevant to the product(s) and/or services that you use or are considering using, please select the appropriate portal from the dropdown on the top right.
-
Instem Pre-Clinical for the following product(s): Provantis, BioRails, Logbook, NOTOCORD-hem, Morphit, Submit, Cyto Study Manager
-
Instem Clinical for the following product(s)/services: Accel, Aspire, Blur, Clinical Trial Transparency Services (CTT), Strong Tower Solutions (STS)
-
SEND Advantage Services for services related to SEND Conversions
Should you require further information that is not currently available on our Trust Center, please contact GRC@instem.com and we will schedule a 3-hour session (during UK business hours) to answer your remaining questions. For more information see: Customer Audit Rights
Trust Center Updates
Instem- PHP Vulnerabilities update
Instem Security Advisory - PHP2Shell (PHP) Core Engine Vulnerabilities
Summary - On 21 October 2026, the PHP2Shell (PHP) project released security updates for multiple critical vulnerabilities in the core PHP engine. The most severe of these could permit an unauthenticated attacker to execute code remotely on an affected server.
Instem has assessed its product portfolio against these vulnerabilities and is issuing this notice to confirm the position for the products listed below.
Products not impacted
Products assessed: Provantis®, Pristima®, Ascentos®, Logbook, Climb, Submit,
eQCM, Compliance Builder, Centrus®, Biorails, Morphit, DefineNow, Matrix Gemini,
NOTOCORD-hem, Pharmacy Formulations, Dispense, Leadscope® and D-wise products
Status: Not impacted
Impact assessment - Instem has confirmed that Provantis®, Pristima®, Ascentos®,
Logbook, Climb, Submit, eQCM, Compliance Builder, Centrus®, Biorails, Morphit,
DefineNow, Matrix Gemini, NOTOCORD-hem, Pharmacy Formulations, Dispense,
Leadscope® and D-wise products have not been impacted by the PHP2Shell (PHP) core engine vulnerabilities.
No remediation, patch or upgrade is required for these products, and no action is
needed from customers in respect of this issue.
Cyto Study Manager™
Product affected: Cyto Study Manager™ (CSM), all versions
Severity: Critical
Summary - CSM™ operates on PHP, so Instem is issuing this advisory to inform you of the potential impact on your installation and of the remediation measures in progress.
Remediation- Instem is preparing a release of CSM™ (version 1.16) incorporating the latest patched PHP version (PHP 8.4.27). Instem expects to make the release available on 30th October 2026. When the release is available, Instem will notify you formally and provide release notes and supporting documentation for your validation activities.
The remediation will be provided only in this release. Customers on earlier versions of CSM™ will need to upgrade to receive it. Please note it is not possible to patch PHP alone.
Recommended actions
Hosted customers: CSM™ is accessible only through a secure Citrix session, so the application servers are not directly reachable from the internet; this significantly reduces the risk of the vulnerabilities being exploited remotely.
On-premise customers: Until the release is installed, Instem recommends that you confirm your Cyto Study Manager™ servers are not accessible from the internet, and that you restrict access to authorised users and trusted networks.
Further information
Instem will issue further communications when CSM 1.16 release is available. Instem continues to monitor this issue and will issue further communications if the position changes. For questions about this notice,or for help planning your upgrade, please contact Instem support.
Please contact the Help Desk for further information
E-mail: help@instem.com