Built for regulated pharma environments. Ready for enterprise scale.
PortiVix is cloud-ready, SSO-ready, RBAC-driven, audit-trailed, tenant-isolated, and designed for pharmaceutical organisations that need secure operations and defensible records.
Your data stays under a governed tenant boundary.
Cloud-hosted deployment in UK, EU, and US regions, with private cloud and on-premise options available through scoping. Each client operates in a tenant-isolated environment with data residency configured by region and no cross-border transfer without explicit configuration.
Encryption at rest and in transit
No plaintext secrets in storage or logs
Tenant-scoped records and tenant-aware database queries
Configurable branding, timezone, locale, feature flags, and role model
The right people see the right information.
Access is controlled through capability-level RBAC and portfolio/project access rules. SSO via SAML 2.0 or OAuth 2.0 can map users from the organisation identity provider into PortiVix roles.
SSO via SAML 2.0 and OAuth 2.0
MFA support
System and custom roles
Capability matrix by module, resource, and action
Expiring assignments for time-limited elevated access
Discoverable, readable, and writable access levels
Every important action should leave a reliable record.
PortiVix records actor identity, event type, technical context, before/after changes, and checksum verification for audit-log integrity. These controls support regulated electronic-record readiness, including 21 CFR Part 11 readiness workflows, subject to customer validation and operating procedures.
What each record captures
- Actor identity, IP address, user agent, session ID, roles, and timestamp
- Before/after state for changes
- Checksum verification for log integrity
Event coverage & export
- Create, update, delete, view, export, login, logout
- Permission changes, role assignments, password resets, and more
- CSV export for audit and compliance review
- Checksum verification endpoint for integrity checks
Audit trail flow
Deploy the way your infrastructure requires.
Cloud-hosted (Azure or AWS)
Available in selected regions with SLA-backed support subject to MSA. Standard deployment typically completes in 2–4 weeks, subject to client readiness.
Private cloud
Deploy in your own cloud account (Azure or AWS) for stronger control over network and data boundaries. Timelines agreed during scoping.
On-premise
Available for organisations with strict infrastructure requirements. Scope, timeline, and validation requirements agreed before implementation.
What we need to configure your environment.
A structured onboarding path with a named implementation contact - so evaluation and rollout carry fewer surprises.
- Organisation hierarchy, departments, designations, users, roles, and approval chains
- Portfolio and molecule master data
- Project templates, phase templates, work calendars, holidays, and workflow settings
- SSO and user provisioning requirements
- Reporting, audit, and deployment preferences
Uptime commitments such as a 99.9% SLA are available for cloud-hosted deployments subject to agreement. Compliance controls support readiness workflows; formal 21 CFR Part 11 compliance requires a validation package and customer validation context.
Give your IT team the full picture.
We cover SSO, RBAC, tenant setup, deployment options, data residency, audit logs, integrations, and onboarding - so technical evaluation carries fewer surprises during implementation.