Keeping your records safe

Can another laboratory see our data?

No. Every laboratory’s work is walled off from every other one, and the wall is built into the database rather than the screens on top of it - so even a programming mistake on our side would not open it.

Where is our data kept?

On servers in Germany, inside the European Union. A copy is held by a second company for safekeeping - encrypted, so they store something they cannot read.

We run no advertising or analytics inside the application. The only outside companies involved are the ones that host the servers, deliver our emails and store the backups; they are named in the agreement we sign with you, and we give 30 days’ notice before that list changes.

What if something is deleted, or a server fails?

We copy everything every day - records, reports, photographs - and keep those copies away from the server they came from, with roughly six months of history available at any time.

More importantly, we rehearse getting it all back. In those drills we check that reports return exactly as they were issued, character for character, and we will show you the results if you ask.

What if someone gets hold of a password?

Each person signs in as themselves and sees only what their role allows - a technician, a quality manager and the owner do not have the same reach. Anyone can add a second step at sign-in using an authenticator app, and the owner can make that compulsory for the whole team.

Repeated wrong passwords lock the account. If one of our own staff ever opens your workspace to help with a problem, it is recorded and the owner is told.

Could a report be changed after we issued it?

Not silently, no. Once approved, a report is frozen. A correction becomes a new version that says on its face it is an amendment, while the original stays exactly as it was - and the system keeps a record of who changed which value, and what it said before.

Is the data encrypted?

Everything travelling between your computer and us is encrypted, as it is with online banking. Backups are encrypted before they leave our building. Passwords are never stored in a readable form.

If we leave, can we take our data with us?

Yes, and you do not need to ask us. The account owner can export the entire workspace at any time, in a format other software can read, and download reports individually or in bulk. Your data is yours.

Paperwork for your procurement department

A data processing agreement, our terms of service and our full privacy notice go to any customer or prospective customer who asks - write to info@arbnexo.com. They set out our security measures in full, including where we are still building. The public privacy notice is at /privacy.

If something goes wrong

Found a security problem? Email info@arbnexo.com. We will keep you posted while we fix it, and we will not go after anyone who reports a genuine problem in good faith.

No system is perfectly secure and we will not claim ours is. If your data is ever caught up in a breach we will tell you within 48 hours of finding out, and notify the authorities where the law requires it.