Top Tier Security

Data security is our top priority

The goal of data security is to protect digital data, such as those in a database, from destructive forces and from the actions of unauthorized users, such as a cyberattack or a data breach.

We place a high priority on data security. Labii follows strict policies to ensure the security and safety of your data. We comply with ISO27000 to ensure the security and integrity of our database and the accessibility of our website.

Website Security

Account Lockout Policy
After 5 invalid or failed attempts your account will be locked for 24 hours to prevent unauthorized access.

Failed Login Report
You will receive a notification when someone attempts to access your account.

Encrypted Traffic with HTTPS
Data communication between your computer and our server is encrypted and secure.

Protection From Clickjacking
Clickjacking occurs when a malicious website presents a page containing an iframe that incorporates legitimate content beneath an invisible malicious page. Labii is built with security to protect your login credentials.

Excessive Session Timeout
Your account will be logged out after 30 minutes of inactivity. (U.S. CNSS - CNSSI No. 1253 section AC-11)

Multi-Factor Authentication
Labii supports MFA to protect your login credentials.

Single Sign On
Labii supports SSO via SAML 2.0.

Invalidated Session After Logout
Prevent others from stealing your login credentials. A user's session on the server will be invalidated after the user initiates log out.

Highly Restricted Access to Labii Backend
Labii backend access is highly restricted to avoid any internal security gaps.

Content Security Policy (CSP)
Labii uses a tough CSP to avoid attackers injecting malicious content through untrusted domains.

X-XSS-Protection Header
Labii uses an X-XSS-Protection response header to provide an additional layer of defense against reflected cross-site scripting attacks.

Periodic Vulnerability Testing
Labii invites third-party vendors to test website vulnerability annually.

Data Security

Audit Trail
Labii keep track of change activities.

Versioning
Labii creates a new version for every single change.

Visitors
Labii tracks the visit log of all records.

Electronic Signatures
An enhanced signature that is able to identify the signer and date, assure the integrity of your data, and be easily verified.

Data Encryption
The data you created and uploaded is encrypted on our server.

Permission Controls
Login credential is controlled by your administrators.

System Logfiles
Access detail to database and files is logged.

Real-time Backup
Your record will be saved immediately after each change.

Daily Backup
Protect yourself from unwanted surprises. We backup your data daily so you’ll always protected when the unexpected happens.

Block Search Engine Crawling
Your research data is configured to avoid from crawl bots. Other people cannot find your data via the search engine.

Free Signup Request a demo

Detect threatening viruses and programs with antivirus scanning

An anti-virus scan is a process of scanning and identifying viruses on a computer using software. Labii can perform a real-time antivirus scanning for all the files uploaded.

Data centers

A data center stores and shares applications and data. Depending on your security needs, you can choose a data center type that suits you best. With labii, you can choose from 3 types of data centers based on your research needs: Shared data center, Dedicated data center, Local data center.

Source code escrow to guarantee service availability

Source code escrow is the deposit of the source code of software with a third-party escrow agent. Source code escrow is a way for Labii to reduce customer risk. Source code licensing does not eliminate all risks, but it can dilute those risks and help facilitate a speedy recovery when the worst happens.

Think of it as home insurance. You don't want your house to burn down, but if it happens, you will have the resources necessary to survive. You can be assured that even if Labii were to go down, you would still have access to the resources you need to keep your mission-critical ELN and LIMS running.

Installation Qualification / Operation Qualification

Labii installation qualification (IQ) ensures that the right version of Labii has been installed according to Labii specifications. To evaluate the quality of the Labii server, Labii team runs IQ during an install, or at any point after an install. Validation of the installation package, configuration of Labii API server are part of the IQ process.

Labii is a sophisticated system with numerous interconnected components and lots of configuration options. In Order to test every single functionality with different scenarios, Labii conducts Operational Qualification (OQ). Labii is tested from its most basic functions to its deepest and most layered capabilities.

Health check

Labii applies health checks to ensure that the services are not disrupted. As there are many things that can go wrong on a server, Labii wrote a script to test the basic connectivity to a service and the presence of a server process. The developer will be notified once the check fails.

Free Signup Request a demo