Privacy & User Access Rights

Data privacy is strictly controlled in LabCup: the group is the owner and any inventory data is private until it is specifically shared!

Data privacy

Controlled data sharing (groups & departments)

Data sharing hierarchy can be set up in LabCup that perfectly reflects the organization’s structure including institutes or departments. Data can be shared on a flexible way, down to the research group level decided by the leaders of the research groups.

User Access Rights

User access rights can be strictly controlled by the group administrators as required. Additionally, there is a ‘Safety Officer’ account, that can be assigned at group level or at any higher level in the organisation (Department, campus-wide, etc). There are also other special user accounts including Stores/loading bay, Fire department, Hazardous waste disposal, and other, to cover different user roles within the organisation.

Users are responsible for chemicals & equipments

Each and every chemical has a responsible person attached to it. When someone leaves the ownership of chemicals has to be transferred. For auditing purposes any change in ownership or chemical data is recorded in the log.

Laboratory Chemical Inventory Software Access Rights

Data Security

Your data is secured by industrial standard strong encryption on the server. Also, the end-to-end communication between the server and the client browser is encrypted by TLS and secure communication is always enforced.

To proactively protect your data we regularly complete third party penetration tests, security assessments and invest heavily into IT security and compliance.

Our latest (2020) penetration test and code review are conducted by the market leader Ernst & Young. The report is available for our contracted clients.

To facilitate the communication on IT security with our partners, we regularly take part in third-party cyber risk management programs as CyberGrx or Prevalent (H-ISAC-2.1.2).

Cyber Essentials is a UK Government-backed, industry-supported scheme to help organisations protect themselves against common online threats. The Cyber Essentials Scheme contains a self-assessment and a technical audit process to ensure the high level of IT security at LabCup.
Data Security
Ernst & Young mark
CyberGRX mark
Prevalent mark
cyberessentials certification mark
cyberessentials plus certification mark

Passwords

In compliance with the highest security standards, passwords are always encrypted within LabCup and no passwords are sent in emails. Password policy rules can also be set.
NEW: Now we provide optional two factor authentication (2FA) for additional security. It is compatible with hardware keys as well if you have any!

CAS integration

LabCup can link with Central Authentication Systems (“CAS”) or Single Sign-in Systems (“SSO”), including:
-OAUTH 2 providers
-SAML
-Shibboleth
Please contact us to discuss this requirement.

Audit logs

Any user action involving data modification is continuously logged and timestamped for auditing purposes (only). In case of incident these can be made available.

Dedicated server

If required, the LabCup software package can run on a dedicated, separate cloud server for an institution . Please contact us to discuss your requirements

Virus & Malware

Any uploaded files are automatically checked using two independent, commercial Virus & Malware scanner.

Backup of your data

Your data is backed up automatically backed up on a daily basis, with no action required on your part. However, if you also wish to save your data in addition to the automatic backup, then you can always export your inventory database and save it on your computer. Your data is yours and we don’t lock you in! The user always owns their data, LabCup simply provides a way for that data to be managed and stored. The backed up data is also AES256 encrypted for the highest data protection and stored on a remote server, within the region as required by data protection regulations.

Backup

Contact us:

For questions,
to arrange a demo,
pricing, and anything else, please get in touch through the catalog or the form!