Security & privacy

Your lab’s data, protected by design.

LabOps Lite is built so that the safeguards a lab’s data deserves are handled quietly, from the database up — not left as an afterthought.

🔒

Isolated per lab

Every lab’s data is walled off at the database level using row-level security. Each query is filtered to the lab you belong to — members can only ever see their own lab’s data, never anyone else’s.

🔑

Individual, secure accounts

Everyone signs in with their own account and password — no shared logins and no anonymous edits. Every action is tied to a real person, so you always know who did what.

👥

Role-based access

Everyone holds a defined role — PI, lab manager, or member — and the app grants each the right level of access. Sensitive actions like managing the team or changing billing stay with the people who should have them.

🧾

A complete audit trail

Inventory changes, protocol runs, and sample events are recorded in a permanent, append-only history with the actor and timestamp — a clear chain of custody for every sample and record. Reproducibility and accountability are built in, not bolted on.

🔐

Encrypted in transit and at rest

Data travels over encrypted HTTPS connections and is stored on managed Postgres infrastructure that encrypts data at rest. Your lab’s records aren’t sitting in the open.

💳

We never see your card

Payments are processed entirely by Stripe. Card details go straight to Stripe and are never stored on our servers — we only ever see whether a subscription is active.

📤

Your data stays yours

Export your inventory, samples, protocols, projects, and tasks to CSV — plus notes and calendars — whenever you want. Your lab’s data is always portable. No lock-in, ever.

🛟

We never sell or delete it

We never sell your data and never delete it on our own — it stays intact for as long as your lab is active, and it’s removed only when you choose to. You stay in control.

Built on infrastructure you can trust

LabOps Lite runs on managed cloud infrastructure hosted in the United States — application hosting and a managed Postgres database from established providers. That means your data benefits from their encryption, network security, and automated backups, rather than a homegrown server someone forgot to patch.

We’re a small, focused team and we’re candid about what that means: we don’t yet carry formal certifications like SOC 2, and we don’t make uptime guarantees we can’t stand behind. What we do promise is a clear data model, honest handling, and data you can pull out at any time.

Your data rights

Want a copy of your lab’s data, or want it deleted? Export is built into the app, and you can reach us any time for a full export or deletion request.

The details

Read exactly what we collect, how it’s used, and the terms you’re agreeing to.

Report a security issue

Found a vulnerability or something that looks off? Tell us and we’ll respond quickly. We welcome responsible disclosure and will work with you to get it fixed.

Report an issue →