Security & trust
Your lab data, protected at every layer
Laboratory data is regulated, confidential and often irreplaceable. HDLIMS protects it with layered security controls, whether you run in HDLIMS Cloud, a private cloud or your own data center.
Security program
Defense in depth, from code to cloud
Security is designed into HDLIMS and operated continuously, not reviewed once a year.
Data protection
- TLS encryption for all data in transit
- AES-256 encryption for data at rest
- Managed encryption keys, with customer-managed keys for private cloud
- Automated, encrypted backups with tested restores
Identity and access
- Single sign-on with SAML 2.0 and OpenID Connect
- Multi-factor authentication and session policies
- Role-, site- and field-level permissions
- SCIM-based user provisioning and deprovisioning
Infrastructure
- Hosted on leading public cloud providers in segregated environments
- Network isolation, web application firewall and DDoS protection
- Infrastructure as code with peer-reviewed changes
- Continuous monitoring, logging and alerting
Secure development
- Secure development lifecycle with mandatory code review
- Automated dependency, container and static code scanning
- Independent penetration testing
- Responsible disclosure program for security researchers
Resilience
- Redundant services across availability zones
- Documented disaster recovery and business continuity plans
- Point-in-time recovery for production databases
- Transparent incident communication
Privacy and data residency
- Choose the region where your data is stored and processed
- Data processing agreement with standard contractual clauses
- You own your data and can export it at any time
- Privacy by design for HIPAA- and GDPR-regulated data
Deployment options
The control you need, in the model you choose
The same platform and the same security controls, with different levels of isolation and operational responsibility.
HDLIMS Cloud
Multi-tenant SaaS with logical tenant isolation, fully managed by HDLIMS. Upgrades scheduled within your change control window.
Private cloud
A dedicated single-tenant environment managed by HDLIMS, with network isolation, private connectivity and customer-managed keys.
On-premises
Deploy in your own data center or cloud account and operate it under your own security policies and procedures.
Responsible disclosure
Found a vulnerability?
We welcome reports from security researchers. Please email info@hdlims.com with the subject “Security report” and give us a reasonable opportunity to investigate and fix the issue before any public disclosure. Please do not access or modify data that does not belong to you.
Security review pack
Architecture overview, security policies summary, data flow diagrams and completed standard questionnaires for your vendor assessment.
Request the packFAQ
Security questions
Where is HDLIMS Cloud hosted?
Can we use our own identity provider?
Who can access our data?
Can we get security documentation for our vendor assessment?
See HDLIMS running your workflows
Book a tailored demo with a lab informatics specialist. We map your sample types, methods and compliance requirements, then show you exactly how HDLIMS fits.