Advanced therapies such as cell and gene therapies and radioligand therapies are deeply personal. Every step of the supply chain is tied to a specific patient, which means protected health information (PHI) runs through the whole journey: who the patient is, what was collected, which product is theirs.

That creates a real challenge. You need that data moving smoothly to coordinate the therapy end-to-end. But regulations like HIPAA in the US and GDPR in the EU demand strict protection — and for many organizations, the answer is non-negotiable: patient data must never leave their own environment.

So how do you orchestrate an end-to-end therapy, while keeping the patient's data inside your own environment?

That's exactly the problem the Data and Document Integration for SAP Advanced Therapy Orchestration add-on solves.

A secure bridge — not a storage locker

The add-on is a companion to SAP Advanced Therapy Orchestration that you deploy and run inside your own environment. Think of it as a secure bridge rather than a repository: the add-on lets SAP Advanced Therapy Orchestration running on SAP BTP work with patient data and documents when they're needed, without storing patient data or documents in SAP BTP.

The data stays where it belongs — in your secure data stores (vaults), on your infrastructure, behind your firewall. The add-on just connects the two, on demand.

Figure 1: Patient data and documents live in your vaults, on your infrastructure, behind your firewall. The Data and Document Integration (DDI) for SAP Advanced Therapy Orchestration add-on is a secure bridge — it enables access to PHI while keeping patient data in customer-managed vaults.

What it lets your teams do

From within the familiar SAP Advanced Therapy Orchestration apps, authorized users can:

• View patient information — see the patient details relevant to a treatment order, only if they're authorized to.
• Manage documents — upload, view, and invalidate the documents that accompany a therapy.
• Generate labels and certificates — produce patient labels and Chain-of-Identity (CoI) certificates that keep every therapy correctly identified.

Everything happens in context, so your teams get the full picture of a treatment order without ever leaving the product — and without patient data leaving your control.

Why you can trust it

• Your data stays yours. Patient data and documents remain in customer-managed vaults. The add-on enables access when needed without storing PHI in SAP BTP.
• The right people see the right things. Access is role-based: someone can work on a treatment order in SAP Advanced Therapy Orchestration and still be blocked from its patient data unless they're explicitly authorized to see it.
• Auditability is built in. Access to patient data and documents is logged to support compliance and traceability.
• Secure by connection. SAP recommends connecting through SAP Cloud Connector, which creates a secure tunnel between SAP BTP and your environment or landscape. You can layer on additional payload encryption if you want an extra safeguard.

And for organizations that keep data across more than one vault — for example, to meet regional data-residency rules — the add-on can route each request to the right one by configuration.

Learn more

The add-on is generally available. For installation, configuration, and security details, see the Setup and Administration Guide for Data and Document Integration for SAP Advanced Therapy Orchestration on the SAP Help Portal. The add-on evolves alongside SAP Advanced Therapy Orchestration — keep the add-on updated to the latest version. For support, use component IS-LS-ATO-DDA.

Your patients trust you with their most personal data. The add-on helps you honor that trust — orchestrate the therapy, keep control of the data.

Source link