Data residency
Know exactly where your lab's data lives.
US and Canadian labs are hosted in the US. UK labs are hosted in the UK. Here is where every part of your data goes, and who handles it.
By region
Where each region's data lives.
| Feature | United States | Canada | United Kingdom |
|---|---|---|---|
| App address | app.labdesk.app | app.labdesk.app | uk.labdesk.app |
| Patient records and files | AWS, US region | AWS, US region | AWS, London |
| Backups | In the US | In the US | In the UK |
| AI flags and summaries | Amazon Bedrock, US | Amazon Bedrock, US | AWS, London |
| Result email | Amazon SES, US | Amazon SES, US | Amazon SES, London |
| Patient payments | Stripe US, payouts in USD | Stripe US, payouts in CAD | Stripe under UK transfer terms, payouts in GBP |
| Main agreement | BAA and DPA | DPA, plus a PIA pack for Quebec | DPA |
Canadian labs are told their data is stored in the US. Our DPA sets out how it is protected.
Separate stacks
The UK runs on its own.
uk.labdesk.app is a separate stack from app.labdesk.app, with its own databases, file storage, logs and backups. UK patient data does not pass through the US service.
- Region chosen when your lab signs up
- Backups and restores stay in region
- Same safeguards in every region
Kept out of third parties
Only what each service needs.
Result emails carry a generic notice and a secure link, never results. Stripe gets the invoice number and amount, never results or test names. Card details stay with Stripe.
- Patient data never used to train AI
- AI inputs are not used to train models by AWS
- Every view, edit, share and export logged
Sub-processors
Who handles your data.
| Service | Provider | US and Canada | UK |
|---|---|---|---|
| Hosting, database, storage and backups | Amazon Web Services | AWS US region | AWS London |
| AI flags and summaries | Amazon Bedrock (AWS) | AWS US region | AWS London |
| Result and account email | Amazon SES (AWS) | AWS US region | AWS London |
| Patient payments | Stripe (Stripe Connect) | Stripe US | Stripe, under its UK transfer terms |
| Lab Desk subscription billing | Stripe | Stripe US | Stripe US |
AWS covers hosting, AI and email under one BAA. Stripe receives only the invoice number and amount, never results or test names. We will tell labs before adding or changing a sub-processor that handles patient data.
Frequently asked questions
Can a Canadian lab be hosted in Canada?
Not at launch. Canadian labs use app.labdesk.app, hosted in the US with notice and DPA safeguards. Talk to us if in-country hosting is a must for you.
Can I move my lab between regions?
Your region is set at sign-up. If you need to move, talk to us and we will plan it with you.
Where does the AI process data?
In the same region as your lab's data: the US for US and Canadian labs, London for UK labs.
Does Stripe see patient results?
No. Stripe receives only the invoice number and amount. Card details are handled by Stripe and never stored by Lab Desk.
How will I hear about sub-processor changes?
We tell labs before adding or changing a sub-processor that handles patient data, as set out in the DPA.
Not legal advice
These pages describe the safeguards Lab Desk provides. They are not legal advice. Please confirm your own obligations with your legal or compliance adviser.
Questions about where your data goes?
Talk to us, or join early access and pick your region at sign-up.