A method of processing a query on a genome to produce a report is disclosed. The method comprises receiving a first secret, a second secret and a query request over a communications network during a first communications session and storing a proxy value associated with the query request in a database. The first secret is used to determine a genome key enabling access to genome data stored in the database and associated with the first secret. The proxy value and a query key are associated using the second secret such that the query key can only be found using both the proxy value and the second secret. An association is stored between the genome key and the query key in the database and the first and second secrets are deleted subsequent to determining the genome key and associating the proxy value and query key, during or at the end of the first communications session, to ensure anonymity. The genome is identified using the genome key and a query associated with the query request is applied to the identified genome to generate a report, which is stored in the data base in association with the query key, whereby the report can be accessed in the database using the query key. Subsequent to storing the report, the association between the genome and query keys is deleted to further ensure anonymity. Also disclosed are methods of generating queries and loading genomes, as well as systems, servers, computer program products and computer readable media implementing the above.