Data Isolation

EaseLab is built so that your lab's data belongs only to you. Patient records, invoices, results, and settings for your organization are not visible to other labs on the platform.

How separation works

flowchart LR
  subgraph labA [Your lab]
    StaffA[Your staff]
    DataA[(Your records)]
  end

  subgraph labB [Another lab]
    StaffB[Their staff]
    DataB[(Their records)]
  end

  Cloud[EaseLab Cloud] --> labA
  Cloud --> labB
  StaffA -.->|no access| DataB
  StaffB -.->|no access| DataA

Principle	What it means for you
Tenant isolation	Each lab is a separate customer environment on the platform
Staff scope	Users only see data for the lab they belong to
Role permissions	Even within your lab, staff only see modules their role allows

Within your lab

Access is further controlled by roles and permissions:

• Reception may create invoices but not delete tests from the catalog
• Technicians may enter results but not change subscription settings
• Owners have full access or can delegate via custom roles

Backups

EaseLab performs managed platform backups. Lab owners can view backup history and request restore through Administration → Backups (with strict confirmation). See Backup & restore.

Compliance practices

Practice	Recommendation
Individual logins	Never share one password across staff
Least privilege	Assign minimum permissions needed
Deactivate leavers	Disable accounts when staff leave
2FA for owners	Enable two-factor authentication

Related

• Security overview
• Roles & access control
• FAQ: Security