Information for your laboratory's software review.
Review LabRuns' data handling, access controls and service details before use. Each row links to the explanation on Data & security. Print this page for your records.
- Publisher
- Berberian Labs LLC, United States
- Service
- LabRuns, hosted method verification software
- Support
- hello@labruns.com
- Security reports
- security@labruns.com
1Service details
| Item | LabRuns | Explained under |
|---|---|---|
| Hosting region | US East (Virginia). Imports, calculations, reports and backups are stored only in the United States. | Hosting and encryption |
| Service providers | Infrastructure providers host the application, the database, the backups and the database archive. Stripe processes payments and keeps card details. | Hosting and encryption |
| Permitted data | De-identified measurements with coded specimen IDs; the key linking codes to patients stays in your laboratory. | Study records |
| Imports | Only the mapped columns are kept. The uploaded file is cleared once the import succeeds, or after one hour. | Study records |
| Encryption | HTTPS to the browser, an encrypted private network to the database, the database and backups encrypted at rest. | Hosting and encryption |
| Sign-in | A single-use code sent by email. Sessions last up to seven days; Account signs out every device at once. | Workspace access |
| Access and roles | Institution administrators assign membership. Workspace roles are Owner, Administrator, Editor and Viewer, checked on every request. | Workspace access |
| Operator access | Only for support, maintenance, security or recovery, each time logged with the date, reason and workspace. | Hosting and encryption |
| Signatures | Optional sign-off under the signer's own account, recording their verified email and, if given, their name. | Saved records |
| Saved records | Saved calculations, signed reports and stored PDFs cannot be edited. A correction becomes a new version. LabRuns checks SHA-256 hashes when records are opened, exported or restored. | Saved records |
| Audit trail | History shows each original value beside its correction and every exclusion reason. Workspace activity lists membership, administrative actions, exports and Trash. | Saved records |
| Backups | A continuous archive for point-in-time recovery and a daily backup, with the latest 14 verified copies kept. | Backup and recovery |
| Monitoring | Service health, PDF printing, backup timing and sign-in email capacity checked every five minutes. | Monitoring |
| Continuity | The institution keeps its license, workspaces and records when an employee leaves; administrator recovery is verified and recorded. | Institutional continuity |
| Export | Settings → Storage and records: one ZIP of the workspace's data, calculations, reports, stored PDFs and history, with checksums and record counts. | Export and deletion |
| Retention and deletion | Trash keeps projects and studies for 30 days; deleted records leave the backups as the copies rotate out. | Export and deletion |
| Closure notice | At least 30 days' notice by email before any planned permanent closure. | Service changes and closure |
| Incidents | Affected workspace owners and account holders are told promptly what happened, what was affected and the response. | Incident response |
2Software evaluation
Run the same studies in your own workspace and compare the values, decisions and reports with the package.
Download the evaluation package