SDMS security and compliance
Home > Products > Security & Compliance

Security and compliance from the ground up.

SOC 2 Report Available

LabKey holds a SOC 2 Type II attestation, commissions independent penetration tests, and publishes its security controls, subprocessors, and audit documentation in the LabKey Trust Center.

Security and compliance features in LabKey allow you to:

  • Control access to research data with group- and role-based permissions, single sign-on, and two-factor authentication
  • Capture detailed audit logs of data access and use, with electronic signature support
  • Handle PHI under HIPAA and electronic records under 21 CFR Part 11
Visit the Trust Center

Security has been a design requirement since 2003.

SOC 2 Type II Attestation

Audited annually, monitored continuously.

  • SOC 2 Type II attestation, renewed through annual audits
  • Security controls continuously monitored and published in the Trust Center
  • Manual penetration testing by independent security firms
  • Automated and manual security testing on every release

Compliance Support

For labs operating under HIPAA and 21 CFR Part 11.

  • PHI handling with encryption and restricted access
  • Electronic signatures and detailed audit trails
  • Validation services for GxP environments

Access Control

Fine-grained control over data access.

  • Group- and role-based permissions for every record in the system
  • Duo two-factor authentication
  • Audit logging of who accessed which records and when

Managed Cloud Security

Secure & compliant hosting in LabKey Cloud

  • Managed network firewall and web application firewall
  • Encryption at rest, TLS encryption in transit
  • Intrusion detection and prevention with continuous application monitoring
  • Managed backups with retention up to 7 years
cta overflow bg
LabKey Trust Center

Review our SOC 2 report, penetration test results, and security controls.

Visit the Trust Center

See how others have succeeded with LabKey

How Origin Sciences Manages Diagnostic Complexity with Sample Manager

Learn more
learnmore

LabKey as the Operational Backbone of Southern Research’s Catalyst Project

Learn more
learnmore

Bringing Clarity to a 300K+ Biorepository at Johns Hopkins

Learn more
learnmore

Sample Manager API Usage at Origin Science

Learn more
learnmore

Sample Manager at JHU’s VIPC

Learn more
learnmore

Streamlining Workflows with LabKey in the Catalyst Project

Learn more
learnmore

Book a demo.

Start your evaluation of LabKey by scheduling a meeting with a LabKey Product Specialist.