Home / Trust centre
How we protect your data.
What our software does today to keep your information safe, stated plainly. If your IT team needs something we do not list here, raise it in discovery and we will tell you where we stand.
Your data is handled like it matters. Because it does.
Governance is part of what we deliver, not a feature we add later. Here is how our software is designed to protect your information.
Approved access only
People sign in to use the software, and only users your administrators have approved can see your data, limited by role and by plant.
Business logic on the server
Calculations and sensitive actions run on the server, and private keys never reach the browser.
A clear audit trail
Changes to records are logged, so you can see what changed, when, and where the data came from.
Backed up and restorable
Backups run every day, a copy is kept off-site in encrypted form, and we have tested a real restore.
Checks on incoming data
Imports are validated as they arrive, and a failed sync alerts a named person instead of failing quietly.
Only the data you approve
We connect the sources you sign off and nothing else. Your data stays yours.
Have specific security or compliance requirements? Raise them in discovery and we will tell you plainly what we support today and what would need to be added.
Security features at a glance.
The answers your IT reviewer will ask for first. Where something depends on your deployment, we say so rather than guess.
| Feature | Status | Detail |
|---|---|---|
| Sign-in required | Supported | Every user signs in before seeing any data. |
| Admin approval for new users | Supported | New users are held until an administrator approves them. |
| Roles and plant-level access | Supported | Administrator, data entry and basic roles, with access that can be limited to specific plants. |
| Sign-in options | Supported | Sign in with Google or with email and password. |
| Role-based exports | Supported | Users can export only the tables their role allows. |
| Business logic on the server | Supported | Calculations and sensitive actions run on the server. Private keys never reach the browser. |
| Encryption in transit | Supported | Every page and API call is served over HTTPS. |
| Audit trail | Supported | Changes to records are logged with time and source. |
| Daily backups | Supported | A backup runs automatically every day at 2 AM, is checked for integrity, and is copied off-site in encrypted form. We keep the latest 30 off-site copies and 14 local copies. |
| Restore testing | Supported | A restore from a real backup has been tested and worked. We repeat restore tests periodically; ask us for the date of the latest one. |
| Personal data separation | Supported | Customer contact details from complaints are stored apart from quality data. |
| Single sign-on (SAML or OIDC) | Discuss in discovery | Depends on your identity provider. We will confirm what is possible for your deployment. |
| Multi-factor authentication (2FA) | On the roadmap | Not live yet. It is planned as the next sign-in upgrade, and we will mark it here when it ships. |
| Data residency | Discuss in discovery | Tell us where your data must be stored and we will confirm whether we can meet it. |
| Security certifications | None held yet | We hold no formal certification (such as ISO 27001 or SOC 2) and have not had an independent penetration test. We will publish dates here once either is booked. |
| Formal uptime guarantee (SLA) | Not offered yet | Support comes directly from the people who build the software. Tell us what response time you need and we will say what we can commit to. |
Services we rely on.
These providers process data on our behalf to run our software and this website.
| Provider | What it does for us |
|---|---|
| Cloudflare | Hosting, content delivery, security filtering, website functions and storage of website enquiries |
| Supabase | Managed PostgreSQL database for QualityPulse application records, encrypted at rest and in transit |
| Google Workspace and Apps Script for data syncs, and Firebase for user sign-in | |
| Resend | Delivery of website enquiry alerts and confirmation emails |
| Microsoft OneDrive | Storage of encrypted off-site backup copies |
| Cal.com | Demo booking and video calls |
Found a security issue?
Email support@legentrixlabs.com with the subject "Security report". Include what you found and how to reproduce it. Please give us reasonable time to fix it before sharing it publicly.
Our contact details for researchers are also published in our security.txt file.
For how we handle personal data on this website, read our privacy notice. If your contract needs a data processing agreement, ask us during discovery.
Tell us what you are trying to fix.
Book a demo, request a pilot or describe the system you need. A real person reads every message and replies personally.
Message sent.
Thank you. We have your message and will reply to the email you gave us. A copy is on its way to your inbox. Your personal link to the interactive demo is in your inbox too.
Pick a time for your demo