Questions to bring to a vendor review
Accounts, access, records and continuity.
Security and trust
Protecting Access to Your Union’s Records
Representation records can contain sensitive member information. Evaluate who can access them, how work is recorded and how your organization can recover or receive its records—not just whether a page displays a lock icon.
Account authentication and access
LaborNexa supports password-based accounts and optional authenticator-based two-step verification. Microsoft work or school sign-in can be configured through an account-linking workflow; a matching email address alone is not treated as permission to link an account. Review the authentication options and setup that apply to your organization before rollout.
Access controls use the organization, role and applicable record permissions. An administrator’s capabilities differ from a representative’s or another user’s view. Tenant separation and authorization checks help govern which organization’s records an account can reach. Ask to test the roles your union intends to use with fictional cases.
Data handling requires more than a login
Your organization retains its rights in the records it submits under the customer service terms. Permission to process those records to provide the service is not a transfer of ownership. Review the applicable agreement for the full responsibilities and terms.
The application is hosted on Render and uses HTTPS for the public application connection. These are parts of the delivery setup, not a claim that every storage layer is encrypted or that every security risk has been eliminated. Use the agreed service terms and privacy information to review responsibilities for the information your organization supplies.
Keep access limited to people who need it, protect account recovery methods and review departures or role changes promptly. Before sending material outside the organization, confirm the intended recipient and the exact documents being disclosed. Internal notes and a case’s supporting evidence are not automatically the same disclosure set.
Backup, recovery and receiving your records
The application includes encrypted-backup and integrity-verification capabilities. Backup and recovery practices depend on the configured operating arrangements. Ask about the applicable schedule, off-site arrangements, retention and restoration process; this page does not promise a particular recovery time or a maximum period of possible data loss.
Operator-assisted encrypted customer exports support transferring scoped records and original files under a reviewed process. Confirm the contents, format and delivery arrangements you need before relying on an export as part of an exit plan. An export request is different from a full infrastructure backup or a promise that every historical system state can be restored.
Auditability and external services
Audit records support review of recorded changes and actions. Their usefulness depends on the workflow and the event being recorded; auditability should not be confused with an independent security assessment or a guarantee that every activity is captured in the same way.
Some features use third-party infrastructure or external processing. Ask which services apply to the features you enable, and review any external-processing disclosure before use. A provider’s capabilities or certifications should not be assumed to certify LaborNexa or your union’s own operating practices.
Questions, incidents and the evaluation conversation
Contact hello@labornexa.com with security questions or a suspected issue. Describe the concern without emailing passwords, authentication codes or unnecessary member case details. We can coordinate the appropriate information needed for review. This contact is not a published guarantee of a particular response time.
Read the Privacy Policy and Terms of Use, then discuss any contractual, regulatory or organizational requirements that apply to your records. No SOC 2, ISO 27001, FedRAMP, CJIS, HIPAA or other certification is asserted on this page. Evaluate the documented capabilities and the proposed service arrangement on their actual scope.
Related resources
Understand the product approach
Connected casework with responsibility and context.
LaborNexa Cases
Review access and data handling in a fictional demonstration
Choose a plan for your union and keep grievances, documents and next actions together.
Get started