Enclave
Bring the analysis, not the disk
A managed environment with the archive mounted read-only, your tooling, and an export review on the way out.
What the enclave gives you
Real compute
Up to 4,096 cores and 32 TB of RAM per project, with GPU nodes for the workloads that need them.
Your pipelines
Nextflow, WDL, Snakemake and plain containers. If it runs in a container it runs here.
No copying
The archive is mounted read-only through a POSIX layer over object storage. Reading a CRAM does not stage it first.
Reviewed export
Request an export, a reviewer checks it against your approval, and it lands in your institutional bucket. Median: four hours.
Reproducible by construction
Every job records its container digest, parameters and input manifest. Reruns are exact.
No internet
Egress is disabled by default. Package mirrors and reference data are provided inside; anything else is a request.
A typical job
run.sh
# inside the enclave — the archive is already mounted
nextflow run nf-core/sarek -r 3.4.0 \
--input samplesheet.csv \
--genome GRCh38 \
--tools haplotypecaller,vep \
-profile helixbank
# 10,400 samples · 412 TB read · 0 bytes egressed
# results: 3.9 GB → submit for export review