How does LabHQ ensure data security?

LabHQ employs various methods of security to protect your data from unauthorized access, data loss or corruption, including:

1. Permission-based Access Control

User accounts are assigned permissions based on their role. Access to data and functions is restricted based on user account permissions. Certain functions, such as test verification and sample approval, require authorization.

2. Audit Trails

Every action carried out in LabHQ (e.g. data modification, approval, deletions) is recorded in a tamper-proof audit trail. The audit trail captures the user responsible for the change, what the change was and the date/time it occurred.

3. Multi-Factor Authentication (MFA)

LabHQ can be configured to use MFA for added security. This can be enforced at an organisation level, requiring users to verify their identify when logging in using an additional authentication step (e.g. email or authenticator app).

4. Regulatory Compliance

LabHQ adheres to industry standards, such as FDA 21 CFR Part 11, GLP and GMP, ensuring electronic records meet regulatory requirements. Digital signatures, version control and time-stamping prevent data tampering.

5. Data Encryption

Data is encrypted both at rest and in transit using industry-standard encryption protocols.

6. Backups & Disaster Recovery

Data is backed up daily using AWS-managed backup services. Daily backups are retained for 120 days.

Point-in-time recovery is available, allowing the database to be restored to any specific point in the last 35 days.

Our disaster recovery procedures support restoration of data in the event of a system outage, data loss or other incident.