Security & data stewardship
Research data deserves both protection and freedom. CollabHub is built around enforced access control, NIH/GDPR-ready data management — and a guarantee that your data can always leave.
The open-export guarantee
Export everything, on every tier, forever — free. Tabular datasets leave in open formats — CSV, TSV, JSON, or XLSX — your uploaded files download as the originals you put in, and your privacy settings produce a full archive of your account records, notebook entries and their complete version history included. No export paywall, no lock-in, no exceptions. If you ever want to leave CollabHub, your data goes with you — see exactly what each export contains.
Account security
Strong defaults for every account, from a solo PI to a full lab.
Multi-factor authentication
TOTP-based MFA with QR or manual enrollment and single-use recovery codes, managed from your security settings.
Password protections
An enforced password policy, lockout after repeated failed attempts, and full session invalidation when you change your password.
Session management
See your active sessions with device metadata and revoke any of them — or sign out everywhere at once.
Enterprise access control
Bring your institution's identity provider; access follows your directory.
Single sign-on (SAML & OIDC)
SP-initiated and IdP-initiated SSO over SAML or OIDC, so your institution controls authentication.
SCIM provisioning
Provision and deprovision users automatically from your directory — departures lose access the moment your IdP says so.
Role-based access, enforced at the API
Owner/Admin/Member roles at the organization level and Owner/Editor/Commenter/Viewer at the workspace level, checked on every request — not just hidden in the UI.
Data regions
Your organization's data lives where you choose.
US and EU regions
Every organization is pinned to a data region — US or EU — and files are stored and served from that region.
Fail-closed region handling
Region resolution is fail-closed by design: an operation that can't determine its region stops rather than defaulting across a border.
Privacy & GDPR
Self-serve rights, not a support-ticket queue.
Export your data
Download a full archive of your account records — including your notebook entries with their complete version history — from your privacy settings at any time. GDPR portability, on every tier.
Delete your account
Account deletion is self-serve and honored end to end, including your content and personal data.
Consent & transparency
Granular consent controls and a transparency view of how your data is processed, managed from your privacy settings.
Audit & compliance tooling
NIH/GDPR-ready records for reviews, audits, and data-management plans.
Audit logs
Organization-level audit trails record who did what and when across your workspaces.
DSAR register
Track data-subject access requests for your organization from intake to completion.
RoPA register
Maintain your Article 30 record of processing activities alongside the data it describes.
Questions or concerns?
Report a security issue
Found a vulnerability? Tell us directly at support@collabhub.ai and we’ll respond promptly.
Privacy & data requests
For data access, export, or deletion questions, reach the privacy team at privacy@collabhub.ai. See also our Privacy Policy and Data-Use Covenant.