How we protect your lab's data
Your inventory and archive records are kept separate from every other lab's, protected in transit and at rest, and only reachable by the people you allow.
Each lab is walled off
Every lab's records live in their own database schema. Files such as photos and SDS documents are stored per lab, never on public web addresses, and every download is checked against your sign-in.
Strong sign-in
Passkeys, authenticator-app codes with one-time recovery codes, and single sign-on with Microsoft Entra ID, Google Workspace or Okta. Lab Admins can require passkeys or 2FA for everyone.
Attack protection
Repeated failed sign-ins lock out, public forms are rate-limited, and every sign-in, sign-out and failed attempt is recorded. The site uses HTTPS only, with strict browser security headers.
No patient identifiers
The archive stores accession or case numbers only. Histo Vault does not ask for patient names, dates of birth or medical record numbers, and warns when something looks like one.
A record you can trust
Every change is written to an audit trail that no one in the lab, including administrators, can edit or delete.
Your data, your choice
Export everything at any time. If you leave, you can permanently delete your lab's data yourself. See the Privacy Policy for how long backups are kept.
Found a security problem? Email service@histologypartners.com and we will respond promptly.