Compliance, Hosting & Data Recovery

Last updated: 16 August 2026

This page answers the questions an accreditation assessor puts to the laboratory about its LIMS provider (ISO/IEC 17025 §7.11.4 and §7.11.5): who hosts the service, where the data is, how quickly it can be recovered, and how the system’s validation is documented.

Hosting & data location

The service is hosted on a private server (VPS) provided by Hostinger International Ltd., in a data centre in Vilnius, Lithuania — inside the European Union. Each laboratory’s database stays on that server.

Backups & recovery

Recovery Time Objective (RTO): 4 hours. Recovery Point Objective (RPO): 24 hours. A full backup of every database is taken nightly, with a SHA-256 integrity check on every file.

Once a week a restore drill verifies that the backups are genuinely recoverable, not merely present. The hosting provider additionally keeps its own weekly server snapshot; that is a further safety net and is not what defines the RPO.

Isolation & traceability

Each laboratory has its own, fully isolated database — not shared tables. Sensitive fields (integration credentials) are encrypted at rest, access is role-based, and changes to technical records are written to an audit trail maintained by the database itself through triggers — that is, it cannot be bypassed by the application.

Sub-processors

The following providers process data on our behalf. Each is bound by a data-processing agreement (DPA); where data is transferred outside the EU, the transfer is covered by the EU Standard Contractual Clauses (SCCs).

Hostinger International Ltd. — application and database hosting; Lithuania (EU).

Postmark — delivery of service email (notifications, reports to the laboratory’s clients); USA, under SCCs.

Anthropic — only for the optional AI features (help assistant, optical character recognition). If the laboratory does not enable them, nothing is sent; USA, under SCCs.

Viva Payments — subscription payment execution; Greece (EU). We never receive or store card numbers.

Validation documentation

We maintain full validation and quality documentation for the service: Validation Master Plan, IQ/OQ/PQ protocols, validation report, User Requirement Specification, requirements traceability matrix, disaster-recovery plan and the supporting SOPs.

These documents are available to customer laboratories on request, under their contract, for use in accreditation assessments. Ask for them through the contact page.