Security & Compliance

Your lab data is safe with us

Laboratory data receives the same level of protection as enterprise financial and healthcare systems — secured, backed up, and fully traceable.

In progress

SOC 2 Type II certification

LIMSey is currently pursuing SOC 2 Type II certification, with estimated certification in late 2026. Ask us for current status and documentation for your procurement process.

Data storage & infrastructure

  • All data stored on servers located in the United States
  • ISO 27001 certified data centers with 24/7 physical security and monitoring
  • Redundant power and network infrastructure
  • Regular security audits and compliance certifications

Encryption & access control

  • All data encrypted in transit and at rest
  • Role-based access controls — each team member only accesses data relevant to their role
  • Fully cloud-based: no servers to maintain, updates and security handled automatically

Backups & recovery

  • Full daily backups automatically stored for 3 months
  • Monthly backups retained indefinitely
  • Multiple backup locations for disaster recovery
  • Regular backup testing to verify data integrity and restoration

Audit trail & traceability

  • Every change automatically logged: user, timestamp, and before/after values
  • Downloadable audit reports for assessors
  • Equipment and calibration records traceable through every job they touched

Authentication & SSO

  • SAML 2.0 single sign-on — works with Okta, Microsoft Entra ID, and other identity providers
  • Two-factor authentication with backup codes
  • Configurable password expiration policies

Granular permissions

  • Custom roles tailored to how your lab is organized
  • Fine-grained permissions down to individual job statuses
  • REST API access via scoped, self-service tokens

Questions from your IT or procurement team? Contact us — we're happy to complete security questionnaires.

Security questions answered directly

Bring your IT team to the demo — we'll cover infrastructure, backups, and access control.