Security
Security, privacy, and compliance underpin how we build VERA.
SSO and multi-factor authentication
VERA supports enterprise single sign-on. Customers can enforce multi-factor authentication and password policies through their identity provider.
Data access
VERA includes role-based permissions to help organizations control who can view, create, edit, review, and approve work in the application.
Our commitment
Customer data remains under customer ownership and control. EQLabs does not use customer data to train foundation models or shared AI systems.
Least-privilege access
Access to production infrastructure is limited to employees with a business need, with internal governance for approval, monitoring, and periodic review.
Hosted on AWS (US)
VERA runs on Amazon Web Services in the United States, in private networks that are not reachable from the internet. Data is encrypted in transit with TLS and encrypted at rest.
AI providers
EQLabs uses trusted AI service providers under commercial agreements. Customer data is processed only to provide VERA and is not permitted to be used to train shared or foundation models.
SOC 2 Type II
In progressEQLabs is working toward a SOC 2 Type II report covering security, availability, and confidentiality controls.
21 CFR Part 11
In progressVERA is being built toward 21 CFR Part 11 support for electronic records, audit trails, and electronic signatures in regulated lab environments.
Questions about our security program?
We are happy to walk your security or IT team through our controls in detail, complete security questionnaires, and share documentation under NDA.
Book a demo