Patient VCFs are sensitive data, and the VCF (and possibly the [[Pharmacotyper]] ) data has to be stored on secure servers. It may also be sensible to run the pharmacolyzer in a facility for sensitive data, and only export the final ''pharmacolysis''. Access to the final PGx analysis could be given through a REST API, and we describe one approach in the section below.