Security Architecture

European data sovereignty and laboratory isolation.

We design and operate Lab Manager Pro with strict European data protection standards (GDPR / DSGVO). Your test items, measurements, calibration assets, and customer reports remain isolated and under your control.

EU Hosting (Frankfurt am Main)

All primary application compute and database infrastructure reside in Frankfurt, Germany.

• Next.js compute: Vercel serverless functions in region fra1 (Frankfurt, Germany)
• Database & Auth: Supabase in AWS eu-central-1 (Frankfurt, Germany)
• Customer workspace data never leaves the European Union

Database-Level Tenant Isolation (RLS)

Every SQL query is evaluated against PostgreSQL Row-Level Security (RLS) policies.

• Strict tenant scoping by lab_id at the engine level
• No laboratory can query or mutate another lab's data, even if application logic were compromised
• Role-based access control (Manager, Quality, Engineer, Client) enforced in database session claims

Encryption in Transit and at Rest

Modern cryptographic standards protect your laboratory records throughout their lifecycle.

• In transit: Mandatory TLS 1.3 encryption with strict HTTP Strict Transport Security (HSTS)
• At rest: AES-256 encryption on all database storage volumes and object storage buckets
• Secrets: Zero client exposure; cryptographic signing keys managed via isolated server environments

Continuous Backups & Immutable Audit Trail

Full traceability for accreditation assessors and disaster readiness.

• Automated continuous Write-Ahead Log (WAL) archiving with point-in-time recovery (PITR)
• Daily automated snapshots replicated across separate physical availability zones
• Immutable audit log capturing user logins, test status changes, report revisions, and QMS actions

Data Portability & Deletion on Exit

Your laboratory data belongs entirely to you. You are never locked in.

• Full export: Lab managers can export project records, chamber schedules, and QMS logs anytime
• Complete deletion: Upon cancellation, customer data is purged from active databases and rotated out of backups
• Read-only grace: Inactive accounts retain data export capabilities without surprise lockouts

Single-Tenant & Self-Hosted Options

Need dedicated infrastructure or on-premises deployment?

• Single-tenant virtual private cloud (VPC) deployments available on Enterprise
• Self-hosted / on-premises options for labs with strict internal air-gap policies
• SAML 2.0 / Okta / Azure AD Single Sign-On (SSO) integration

Legal & Subprocessor Disclosures

Review our complete list of infrastructure providers and data protection documents. No unverified third-party scripts or advertising pixels are loaded on customer workspaces.

View Subprocessors List Data Processing Agreement (AVV)

Notice regarding certifications:

Lab Manager Pro supports laboratory compliance with ISO/IEC 17025:2017 clauses and adheres strictly to European GDPR / DSGVO principles. The platform does not claim formal third-party certifications (such as SOC 2 or ISO 27001). Formal laboratory accreditation remains the sole domain of authorized accreditation bodies (such as DAkkS, A2LA, UKAS, or NVLAP) assessing the laboratory's own operations.