Enterprise-Grade Security

Your data is your business. We treat it with the highest level of protection.

Data Encryption

All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 standard encryption. Your sensitive business information is never exposed.

Daily Backups

Your database is backed up automatically every day, and those backups are kept for 7 days. We also make a separate encrypted copy every night and store it off-site with a different provider.

Compliance & Standards

HIPAA-Conscious Architecture (we do not currently offer a BAA)
SOC 2 Type II Audited Infrastructure (via Supabase)
GDPR Compliant Data Processing
Role-Based Access Control (RBAC)
Strict Internal Data Access Policies

Need a BAA?

We don't offer a Business Associate Agreement today. We're working on a HIPAA plan with a signed BAA for a small group of founding labs. If your lab needs one, tell us about it and we'll give you a straight answer on fit, pricing and timing.

Request a HIPAA fit check

Access Control

SimpleLabOS implements role-based access control (RBAC) so every team member only sees what they need. Lab owners, technicians, and dentist portal users each have distinct permission scopes.

  • Row-level tenant isolation between labs
  • Session timeout and automatic logout
  • Three access levels: Owner, Manager, Designer

Data Handling & Residency

All production data is hosted on U.S.-based infrastructure. We never sell, share, or use your lab data for training purposes. Data export is available at any time.

  • U.S.-based cloud infrastructure
  • Full data export on request
  • No data resale or third-party training use

Incident Response & Monitoring

SimpleLabOS maintains continuous uptime monitoring with a 99.9% SLA target. Our incident response process includes automated alerting, root cause analysis, and customer notification within 24 hours for any data-impacting event.

99.9%
Uptime target
24hr
Incident Notification
7 days
Daily backups kept