Security & Privacy
How E-Labus Protects Your Data
E-Labus is designed with privacy, transparency, and patient control at its core. Laboratory data is never sold, and access is always under patient control.
Data Protection Overview
- •All laboratory data is encrypted in transit (TLS 1.2+) and at rest using industry-standard AES-256 encryption.
- •Infrastructure is hosted on SOC 2 Type II–certified cloud services (Supabase, AWS). Row-level security is enforced at the database layer on every patient record.
- •Access controls follow the principle of least privilege. Internal systems do not expose raw patient data to any team member without explicit authorization.
Patient Ownership of Data
- •Patients retain full ownership and control of their laboratory data at all times.
- •Data can be exported or deleted upon request. E-Labus supports the right to data portability.
- •No data is used for secondary purposes, advertising, or profiling without explicit patient consent.
Provider Access Only When Shared
- •Providers can only view patient data when the patient explicitly shares access through a time-limited sharing session.
- •Sharing sessions are revocable at any time by the patient. When a session expires, provider access is automatically terminated.
- •All access events are logged for auditability.
Platform Does Not Sell Medical Data
- •E-Labus does not sell, rent, or share patient medical data with third parties.
- •Data is used exclusively to provide the services described — organizing laboratory trends and supporting clinical review.
- •Aggregated, de-identified analytics may be used internally to improve service quality. No individual patient data is ever disclosed.
Informational Use Only — Not Medical Advice
- •E-Labus provides trend analysis and insight summaries to support provider review. It does not diagnose, treat, or recommend medical interventions.
- •All AI-generated content includes confidence indicators and disclaimers to ensure transparency.
- •Patients and providers should always rely on qualified clinical judgment for healthcare decisions.
E-Labus organizes laboratory trends to support clinical review. It is not a medical device and does not provide diagnoses or treatment recommendations.