Security

Aidlab is run by Aidmed Sp. z o.o., Oliwska 85, 80-542 Gdańsk, Poland. We process the data you collect with the Aidlab app, my.aidlab.com and Aidlab Teams. Here’s where we store it, how we protect it and who helps us process it.

Updated October 2, 2026

Where your data is stored

We store accounts, measurements and files in the EU. my.aidlab.com, Aidlab Teams and our API run on Heroku in Dublin, Ireland. The database runs on DigitalOcean and files are kept in Amazon S3, both in Frankfurt, Germany.

Some of the subprocessors listed below handle parts of the data in the USA.

How we protect it

  • Connections to our apps, API and databases use TLS.
  • Our hosting providers encrypt the database and stored files at rest.
  • Administrator, hosting and code repository accounts require multi-factor authentication.
  • We scan our code for vulnerable dependencies and leaked secrets.
  • The database is backed up daily, and stored files are versioned.

Subprocessors

These companies process personal data for the Aidlab app, my.aidlab.com and Aidlab Teams.

CompanyPurposeLocation
Heroku (Salesforce)App hostingIreland
DigitalOceanDatabaseGermany
Amazon Web ServicesFile storageGermany
Better StackLogs and uptime monitoringGermany
ResendTransactional emailUSA
StripePaymentsIreland, USA
SentryError trackingUSA
Google FirebasePush notifications, app analytics and crash reportsUSA
OpenAIIn-app insights from pseudonymized health summariesUSA
TelnyxSMS invitations and codes, Teams callsUSA
Mailchimp (Intuit)Newsletter and marketing emailsUSA

Analytics and advertising tools used on this website are listed in our Privacy Policy.

Report a security issue

Email security@aidlab.com. Include the affected URL or app version, steps to reproduce the issue and the impact you expect. Our security contact is also published in security.txt.

Organizations using Aidlab Teams can request a data processing agreement (DPA) at contact@aidlab.com.