Trust Center
How Synvra protects your laboratory's records.
Regulated laboratories qualify their suppliers. This page states the controls Synvra has today, in plain language, and nothing it cannot show you.
Security controls
What is in place today.
Access and authentication
Role-based permissions, enforced by the server rather than the browser. Multi-factor authentication (authenticator app, with one-time recovery codes) is required for platform and organisation administrators, and every other user can switch it on for their own account. Releasing results and issuing certificates requires re-entering your password.
Organisation and site separation
Each laboratory organisation is isolated from every other, and sites within an organisation are separated with explicit memberships. Separation is enforced in the data layer and covered by automated tests.
Audit trail
Significant actions record who acted, when and why, with before and after context where it applies. Support staff can only act inside a customer organisation through controlled, recorded impersonation.
Certificate integrity
Released certificates are controlled PDFs with a public verification reference. Recipients see whether a certificate is valid or withdrawn; internal evidence never appears on the public page.
Hosting
Synvra runs on Amazon Web Services in the US East (N. Virginia) region, in dedicated production and development accounts. Transactional email is sent through Amazon Simple Email Service.
Your data, your exit
You own your laboratory data. Organisation data can be exported, and certificates you have issued remain verifiable permanently, even if you change package or leave.
Subprocessors
Who processes data on our behalf.
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services, Inc. | Hosting, storage and transactional email | United States (US East) |
Reporting a concern
Security and privacy contacts.
- Report a suspected vulnerability to contact@synvra.ai. Please do not test against customer organisations.
- Privacy questions and data requests go to contact@synvra.ai.
- Data processing agreements, the security questionnaire pack and validation-support material are provided during evaluation.
Qualifying Synvra as a supplier?
We answer security questionnaires and walk your IT or quality team through the controls on a call.