Skip to content

Airlock requests

The airlock is used to move files in and out of your workspace. Every import and export is reviewed and approved by the TVS SDE team before the files are accessible.

One file per request

The airlock supports a single file per request. If you need to import multiple files, zip them into a single archive before uploading.

Raising a GitHub issue

Every airlock request must be accompanied by a GitHub issue in your workspace repository. See your workspace repository at `https://github.com/orgs/tvs-sde/repositories.

Creating an import request

Use an import request to bring files into your workspace — for example, code, models, or data delivered by the TVS SDE team.

  1. Go to your workspace in the TRE portal and click the Airlock tab on the left
  2. Click + New Request and choose Import
  3. Enter a title and a detailed business justification
  4. Click Create, then confirm the pop-up
  5. Click Generate to create the SAS URL for the storage container, then copy it
  6. On the machine you are importing from, open Microsoft Azure Storage Explorer
  7. Right-click Storage Accounts and choose Connect to Azure Storage
  8. Choose Blob Container
  9. Select Shared access signature URL (SAS)
  10. Paste in the container URL
  11. Click Connect
  12. Upload the file you want to import
  13. Return to the TRE portal and click Submit

The TVS SDE team will review your request. You will be notified once it is approved or rejected.

Creating an export request

Use an export request to take results out of your workspace. All exports are subject to statistical disclosure control review.

Export restrictions

  • No row-level data may be exported in any format
  • All statistics (means, medians, counts etc.) must represent more than 10 patients
  • No identifiable data
  1. Go to your workspace in the TRE portal and click the Airlock tab
  2. Click + New Request and choose Export
  3. Enter a title and a detailed business justification
  4. Click Create, then confirm the pop-up
  5. Click Generate to create the SAS URL, then copy it
  6. Open Microsoft Azure Storage Explorer on your VM
  7. Connect using the SAS URL (same steps as import above)
  8. Upload the file you want to export
  9. Return to the TRE portal and click Submit

Accessing an approved request

Once a request is approved, you can access the files as follows:

  1. Double-click the request in the Airlock tab
  2. Click the copy button next to the SAS URL
  3. Open Microsoft Azure Storage Explorer and connect using Blob Container → SAS URL
  4. Paste the URL, click Connect
  5. Download the files from the container to your VM

Import requests are only accessible from inside the TRE

If you are accessing an approved import, you must be connected to a VM within your workspace. Export requests are accessible from outside the TRE.

Airlock guidelines

Always provide a detailed description and justification.

Request type Permitted content
Import Pseudonymised data, offline applications/installers, models, code
Export Aggregate statistics only (>10 patients), no row-level data, no identifiable data