AURIA'S ATOLLI

The price of Atolli consists of a one-time initiation fee and a monthly usage fee, which is based on the selected machine package. The price is also affected by whether the purpose of use is academic or commercial. The customer can also separately order changes to their software configuration, or expert consultation.

*) The initiation includes setting up one project-specific secure operating environment, creating users in the environment, and bringing the customer's data into the environment via a quarantine environment. The initiation fee also includes the export of the data and closing the project-specific secure operating environment at the end of the project.

**) Atolli machine packages are predefined device configurations that define the performance of the secure operating environment ordered for the project. If your needs do not correspond to the predefined configurations, we can customize the configuration according to your needs. All packages include 8 users as default.

***) Software customization offers the customer the opportunity to install additional software and applications in their project-specific secure operating environment in addition to Atolli's standard software. The customer is responsible for possible license fees etc. for additional software, but Auria can install the software according to the price list when the customer delivers the license key. For example, SPSS installation is charged for 1 hour of work.

****) Consultant services may include advice on the use of Atolli, other consultation, and addition of users when more than 8 users is requested.

*****) The minimum break of the pause service is 3 calendar months and the maximum break is the validity period of data permit.

Note: The prices shown are VAT 0%. VAT will be added and charged at the prevailing rate.
The minimum invoicing period for Atolli machine packages is 3 months, and invoicing takes place every 3 months.

Auria's Atolli, default software 1.1.2025

•  Operating system: Ubuntu 24.04 LTS
• Database: PostgreSQL 16
• R:BASE
• Python 3.12
• RStudio
• GNU Emacs
• LibreOffice
• ReText
• Notepad++
• GeoDa
• htop
• Glances
• LaTeX
• Git
• tar
• Gzip
• Docker
• Visual Studio Code
• podman

Note: In addition to the default software it's possible to install other software you find needed, for example SAS, SPSS, etc. Customer is responsible of any possible license or other fees the extra software may cause.

If your project involves a data permit, only the recipient of that data permit or the contact person named in the permit has the right to order Atolli or make changes to an Atolli order. When you want to start to use Atolli:

1. Download the order form here (ods).
2. Fill in the order form and send it with attachments to Auria Health Data Services at: atolli(at)varha.fi.
• Attach the data permits that entitle you to process your data in the secure operating environment you are about to order. For example, if your project includes a permit for the secondary use of social and health data, send the permit as an attachment with the order form.
3. After we have received and processed your order, we will send you an order confirmation and instructions on how to start to use your environment.
• We will process and confirm a received order mainly within a few working days if the order form contains all the necessary information and is filled out correctly and with attachments. If necessary, we will ask you for more information before confirming the order.
• We will create your environment and provide instructions on how to log in within a few working days after provided order confirmation unless a specific schedule has been agreed upon.
4. We will transfer the data to your environment.
• Data subject to a permit for the secondary use of social and health, must be available from the data controller or Findata. Only Auria Health Data Services can transfer data to your Atolli environment.
• For the transfer, we will coordinate access to the data with you, the controller and/or Findata.
5. We will send you a confirmation when the data has been transferred to your Atolli environment.
6. Your order is ready and your Atolli environment is ready for use.

It is possible to make changes to your Atolli environment for example in the following situations:

• You want to add data processers
• You want to extend the operating time of the environment
• You want to change the machine package or performance of the environment
• You want to add software to your environment
• You want to change the invoicing information
• You want to close the environment
• Other possible changes

When you want to order changes to your Atolli environment:

1. Download the change order form here (ods).
2. T2. Fill in the change order form and send it with attachments to Auria Health Data Services at: atolli(at)varha.fi.
• Attach the data permits that entitle you to process your data in the secure operating environment you are about to order. For example, if your project includes a permit for the secondary use of social and health data, send the permit as an attachment with the order form.
3. Once we have received and processed your order, we will send you an order confirmation.
• We will process and confirm a received order mainly within a few working days if the order form contains all the necessary information and is filled out correctly and with attachments. If necessary, we will ask you for more information before confirming the order.
4. We will carry out the measures to your environment according to the change order.
5. We will send you a confirmation when the requested changes have been implemented.

Data transfer to your Atolli environment is always done by Auria Health Data Services. You cannot transfer the data to your environment yourself.

When you need to transfer data for your environment:

1. Order a new Atolli environment including data transfer or make a change order for the Atolli environment you are already using. Receive an order confirmation.
2. We will contact you to coordinate the access to the transferable data.
• Data subject to a permit for the secondary use of social and health data is transferred to your environment as an internal transfer from the patient register or the social care customer register of The wellbeing services county of Southwest Finland or as an external transfer from an external party such as Findata.
3. We ensure the integrity, faultlessness, and security of the data.
4. We transfer the data securely to your environment.
5. We will send you a confirmation when the data has been successfully transferred to your Atolli environment.
6. Make sure the data transferred to your Atolli environment is valid.
• If you suspect that the data is incorrect or improper, you must immediately notify Auria Health Data Services’ customer service at atolli(at)varha.fi about it.

Note that:

• Outside of Atolli, you can only use anonymous results derived from the data.
• Data transfer out of the environment is always done by Auria Health Data Services. You cannot transfer the data yourself.
• Data transfer out of the environment is necessary when your environment is about to expire and before the environment is closed.
• You do not have access to the data in your environment after the operating time of your environment has expired. The data must be taken out of the environment within the operating time.
• You must anonymize the exported data according to Findata's instructions and submit the data to Findata for review regarding the anonymization.

1. Anonymize the data according to Findata's instructions.
2. Make a change order regarding the transfer of data out of the environment. Receive an order confirmation.
• In the change order form, mark the exact location (path) of the directory containing the material (files) to be transferred from your Atolli environment.
3. AAuria Health Data Services transfers the data securely using Atolli's quarantine environment.
4. You will receive a notification when the results from the data are available and downloadable.
5. Download the data for yourself.
6. Submit the data to Findata for anonymization review.

Your Atolli environment can be closed in the following situations:

1. The operating time of your Atolli environment expires.
• The operating time of an Atolli environment ends by the operating end date confirmed in the order confirmation.
• If the use of the environment is accompanied by a data permit, the operating time ends at the latest when the data permit expires.
2. You want to close your Atolli environment.
• When you want to close your Atolli environment before the end of the operating time, make a change order regarding the closing of the environment.
3. Other reason, such as contrary use against the terms of use of or other misuse.

Note:

• Users' access to the environment ceases the day after the data permit expires.
• Auria Health Data Services will keep the environment and its data for a maximum of six (6) months after the end of the data permit, after which the environment and its data will be deleted according to Findata's regulation, unless the law or the data permit stipulates otherwise. If the orderer of the service requests access to the data during the storage period of six (6) months, the orderer of the service must make a new order for the environment, in which case Auria Health Data Services will ensure that the orderer and its users have a valid data permit to process the data.

You can add applications to your environment if Atolli's standard applications do not cover all your needs. When adding new applications, you are responsible for obtaining required licenses and/or responsible for fees and costs, which might be required to legally use the applications you are adding.

When you want to add software and you are ordering a new environment, mark the additional software you need on the order form.

1. Place a change order regarding the addition of software. Receive an order confirmation.
2. You are temporarily granted extended access rights that allow you to install software in your Atolli environment.
• The extended access right are temporarily granted to one user, who by default is the contact person specified in the order of your Atolli environment, or alternatively another user of the environment indicated by that contact person to Auria Health Data Services by e-mail.
• Please note that when a user in your environment has extended access rights:
• There is no data available in the environment. The memory partition, which contains the data, is switched off.
• The environment is connected to the Internet.
3. Complete the installation of the software in your environment.
4. When you have installed the additional software you ordered, notify Atolli's customer service about this at: atolli(at)varha.fi.
5. Auria Health Data Services removes the extended access right, connects the data back to your environment, and disconnects your environment from the Internet.
6. Adding software to your environment has been done. Your environment is ready for use with the new software.

A user must make an initial login to their new Atolli environment when using it for the first time. By logging in for the first time, the user confirms that he/she is the person registered in the order of the Atolli environment, to whom access rights to Atolli are requested for.

Here is how you log in for the first time:
After the order confirmation, Auria Health Data Services sends each user of the environment a personal e-mail, which contains instructions and a guided procedure for logging in for the first time. By following the instructions in these emails and on the screen, the user will succeed in logging in for the first time. Note:

• Carefully follow the instructions in the e-mails and on the screen. A successful first login covers following steps, in chronological order, per user:
1. Receiving an email regarding initial user identification. After identifying, the user will be asked to provide an identification code to Auria Health Data Services.
2. Receiving an email regarding joining an Atolli environment. The user is asked to enter and confirm their email address, which will link them to the right environment.
3. Receiving an email regarding confirming a successful onboarding. The user is asked to confirm their onboarding to Atolli with a one-time link. The link is confirmed by strong authentication and by selecting the "Accept" option shown on the screen.
• User identification is always done with Suomi.fi authentication, which means you need bank credentials or another Suomi.fi service authentication method to authenticate yourself.

When you want to log into your Atolli environment:

1. With a web browser, go to:https://atolli.auria.fi
2. On the login page, select "Log in"
3. Identify yourself with the Suomi.fi authentication service.
4. Select the Atolli environment you want to log into.
• If you have access to one environment, you will only see one environment as an option.
• If you have access to more than one environment, you will see a list of the environments to which you have access.

• You always log in to Atolli with Suomi.fi authentication. When the user logs out and returns to Atolli, they must identify themselves again with the Suomi.fi authentication service.
• Foreign users have the option to log in with Suomi.fi authentication using the Finnish Authenticator application.