Enterprise-Grade Security

Protect scientific data with enterprise-grade security, access control, and resilience

Overview

Labii protects scientific work with layered safeguards across user access, web traffic, research data, file uploads, infrastructure, and service operations. Encryption, permissions, audit trails, backups, health monitoring, qualification support, and source code escrow work together to reduce risk without slowing everyday laboratory workflows. Flexible shared, dedicated, and local deployment options also let organizations choose the level of infrastructure isolation and control that fits their security and governance needs.

Website Security

Labii applies multiple controls to protect browser sessions, accounts, and the web application itself. Encrypted HTTPS traffic, authentication safeguards, session controls, restricted backend access, security headers, monitoring, and periodic testing work together to reduce common web risks. The protections below remain active around the everyday sign-in and research experience.

lock_personAccount Lockout Policy
After 5 invalid or failed attempts your account will be locked for 24 hours to prevent unauthorized access.

errorFailed Login Report
You will receive a notification when someone attempts to access your account.

httpsEncrypted Traffic with HTTPS
Data communication between your computer and our server is encrypted and secure.

blockProtection From Clickjacking
Clickjacking occurs when a malicious website presents a page containing an iframe that incorporates legitimate content beneath an invisible malicious page. Labii is built with security to protect your login credentials.

timelapseExcessive Session Timeout
Your account will be logged out after 30 minutes of inactivity. (U.S. CNSS - CNSSI No. 1253 section AC-11)

screen_lock_portraitMulti-Factor Authentication
Labii supports MFA to protect your login credentials.

vpn_keySingle Sign On
Labii supports SSO via SAML 2.0.

leak_removeInvalidated Session After Logout
Prevent others from stealing your login credentials. A user's session on the server will be invalidated after the user initiates log out.

network_lockedHighly Restricted Access to Labii Backend
Labii backend access is highly restricted to avoid any internal security gaps.

bug_reportContent Security Policy (CSP)
Labii uses a tough CSP to avoid attackers injecting malicious content through untrusted domains.

remove_circle_outlineX-XSS-Protection Header
Labii uses an X-XSS-Protection response header to provide an additional layer of defense against reflected cross-site scripting attacks.

assignment_turned_inPeriodic Vulnerability Testing
Labii invites third-party vendors to test website vulnerability annually.

no_accountsPotential Website Attach Report
Labii developers receive reports whenever an anonymous user attempt to hack Labii.

blockIP Block
If anyone tries to hack Labii, their IP will be promptly blocked by us. Labii retains the authority to block access from entire cities or countries based on their IP addresses.

Data Security

Labii protects research data throughout its working life, from creation and revision to access, backup, and recovery. Encryption and permission controls help preserve confidentiality, while audit trails, version history, signatures, visit logs, and system logs improve traceability. Real-time saving and scheduled backups support integrity and availability when unexpected events occur.

historyAudit Trail
Labii keep track of change activities.

forward_5Versioning
Labii creates a new version for every single change.

people_altVisitors
Labii tracks the visit log of all records.

gestureElectronic Signatures
An enhanced signature that is able to identify the signer and date, assure the integrity of your data, and be easily verified.

verified_userData Encryption
The data you created and uploaded is encrypted on our server.

vpn_keyPermission Controls
Login credential is controlled by your administrators.

assignmentSystem Logfiles
Access detail to database and files is logged.

cloudReal-time Backup
Your record will be saved immediately after each change.

cloudDaily Backup
Protect yourself from unwanted surprises. We backup your data daily so you’ll always protected when the unexpected happens.

bug_reportBlock Search Engine Crawling
Your research data is configured to avoid from crawl bots. Other people cannot find your data via the search engine.

Choose the Right Data Center Model

Select the hosting model that matches your budget, performance, and governance requirements.

- Shared data center: Use Labii's managed shared infrastructure with the free option.
- Dedicated data center: Run Labii on isolated computer resources reserved for your organization.
- Local data center: Deploy Labii with your own on-premises infrastructure and premium data storage for direct operational control.

read_moreExplore Labii data center options

Scan Uploaded Files Before They Enter Your Workflow

Labii scans uploaded files to help detect viruses and malicious content before they become part of a laboratory record. Automated scanning adds a protective checkpoint to routine uploads while allowing researchers to keep working through a familiar process. This extra layer helps protect shared research data and the systems used to access it.

Support Regulated and Resilient Operations

Labii combines documented security controls with operational planning to support organizations working in regulated environments. Business continuity planning, recurring vulnerability scanning, disaster recovery procedures, access governance, and audit-ready records help teams prepare for disruptions and demonstrate how risks are managed. Organizations can align these capabilities with their own validation, quality, and regulatory programs.

Detect Service Issues with Continuous Health Checks

Labii health checks routinely verify essential service connectivity and server processes. When a check fails, the responsible team receives an alert so the issue can be investigated before it develops into a broader disruption. This continuous visibility supports faster response and more reliable laboratory operations.

Protect Long-Term Access with Source Code Escrow

Source code escrow places a maintained copy of Labii's source code with an independent escrow agent under agreed release conditions. If a qualifying service disruption occurs, eligible customers can gain access to the materials needed to maintain the software independently. This option adds another layer to business continuity planning for mission-critical ELN and LIMS operations.

Ready to Build a Better Way to Run Your Lab?

A researcher assembling a configurable scientific application

Turn scattered data and manual workflows into one configurable scientific platform. Start free to build your first Labii application, or request a personalized demo to see how your team can work faster, stay compliant, and scale without replacing the processes that already work.

Free signup Request a demo

Spread the word. Get rewarded. 
Refer a company to Labii and earn free months for each seat they sign.
read_moreLearn more about Labii Referral Program