locations · memphis

In Memphis a package scan, a rail car and a genome all leave a data trail. Each needs an owner.

Memphis moves freight all night. Sort centers, warehouses and rail yards depend on handheld scanners, partner portals and thousands of seasonal workers. Across town, research teams share pediatric genomic data with scientists around the world. Our Memphis conversations start with access in both settings.

in short·20-second read

In Memphis we work with logistics, distribution and manufacturing firms and with research and health organizations.

For freight, the work is frontline workforce identity, shipper and carrier API credentials, and warehouse and telematics data pipelines. For research, it is controlled access to genomic and clinical data and audit trails that satisfy funders. We are based in Frisco, Texas, serve Memphis clients remotely and come in for workshops and launches.

There is no Cohash office in Memphis. Our nearest base is Frisco, Texas. We deliver Tennessee work remotely and fly in for site walks of sort floors and warehouses, design workshops and cutover nights.

Ask an engineer facts checked 2026-10-21 · 9 sources
rules
Tennessee breach notification, Tenn. Code Ann. §47-18-2107Tennessee Information Protection ActNIH Genomic Data Sharing Policy
who and what

Who we work with in Memphis, and the rules they work under

industries
  1. Air cargo, parcel and freight

    Hub and sort operations run on shared handhelds, badge readers and contractor crews that swell for peak season. Sign-in has to take seconds, and access has to end the day a contract does. We tie frontline identity to the staffing feed and HR, set up passwordless sign-in on shared devices and remove orphaned accounts after each peak.

  2. Third-party logistics and distribution

    A Memphis warehouse may serve dozens of shippers, each connected by EDI, API keys and portal accounts. Those credentials outlive the contracts that created them. We inventory machine and partner credentials, attach each one to a customer contract and rotate them through a vault.

  3. Pediatric research and hospitals

    Genomic and clinical datasets are shared with outside researchers under data use agreements. The hard part is proving who downloaded what, and that access ended when the study did. We build controlled-access data platforms with approval workflows and audit logs that a research compliance office can export.

  4. Regional manufacturing

    Plants in the region connect production lines and quality systems to cloud analytics. We scope those service accounts, separate plant networks from the office and keep device and batch data traceable for quality audits.

regulations
  1. Tennessee breach notification, Tenn. Code Ann. §47-18-2107 ↗

    Tennessee sets a hard ceiling of 45 days from discovery for telling affected residents, with a delay allowed only when a law enforcement agency asks. Since the 2016 amendment, an employee who takes personal data and uses it unlawfully counts as an unauthorized person, so insider theft triggers notice too.

  2. Tennessee Information Protection Act (in force 1 July 2025) ↗

    Covers consumer data only, so worker and business contact data fall outside it. A shipper or retailer with over $25 million in revenue and data on 175,000 or more Tennesseans must honor access and deletion requests. The Attorney General enforces it after a 60-day cure notice, and courts can impose up to $7,500 per violation.

  3. NIH Genomic Data Sharing Policy ↗

    NIH expects funded investigators to share genomic data responsibly. Large-scale human genomic studies register in dbGaP and need an Institutional Certification, which brings controlled-access and data use obligations for the institution.

01Peak season doubles our headcount for eight weeks. How do we keep identity under control?

Feed the staffing agency rosters into your identity platform as a separate worker type with a hard end date. Accounts then expire on their own, and a weekly report lists any that were extended. We set this up before peak, when there is still time to test it.

02Do Tennessee's privacy rights cover our warehouse employees?

The Tennessee Information Protection Act defines a consumer as a resident acting in a personal context, so employee and commercial data are outside it. Employee data still falls under the breach statute and other laws. Ask counsel how this applies to your workforce.

03Can you clean up the API keys we have issued to shippers over the years?

Yes. We collect keys from your gateway, EDI platform and code, match each to an active customer and revoke the rest on a schedule you agree with your account teams. New integrations move to scoped, expiring tokens.

04We share genomic data with outside labs. What do you build for that?

A request and approval workflow tied to your data use agreements, access that expires with the agreement, and download logs per dataset. We work alongside your IRB and research compliance staff, who keep the approval decisions.

sources 9 sources linked last checked 2026-10-21 content fingerprint d704d5d8
  1. 01Greater Memphis Chamber, Memphis business climatememphischamber.com ↗
  2. 02FedEx, company structurefedex.com ↗
  3. 03Memphis International Airport, Aboutflymemphis.com ↗
  4. 04BLS, Memphis TN-MS-AR economy at a glancebls.gov ↗
  5. 05St. Jude Cloudstjude.cloud ↗
  6. 06Tennessee Public Chapter 692 (2016), amending §47-18-2107publications.tnsosfiles.com ↗
  7. 07Tennessee General Assembly, HB 1181 (Tennessee Information Protection Act)wapp.capitol.tn.gov ↗
  8. 08Tennessee Public Chapter 408 (2023), enrolled textpublications.tnsosfiles.com ↗
  9. 09NIH Genomic Data Sharing Policygrants.nih.gov ↗
Reviewed by the Cohash team Product names are trademarks of their owners. how we handle facts and data →
next step

Tell us what you're running. We'll tell you what we'd do first.

A 30-minute working session with a senior engineer. No slides.

useful to bring
  • The platform and the version you're on
  • Where you need to get to, and by when
  • What's custom: rules, plugins, integrations
  • Any audit finding or deadline driving it