Open-source LIMS + implementation — by AurevionSec
ISO 15189-oriented GDPR-compliant No license fees 100% in-house

Clinical lab software
your lab actually owns.

The complete software for small and mid-size diagnostic labs — from sample to audit-proof report. Its audit trail is built around ISO 15189, your patient data stays in-house — and without the six-figure license fees of the big vendors.

Not ready to talk yet? See how a project runs
Established standards: HL7 & FHIR · GDPR-ready · No costly server · Open source & audited
lims.ihrlabor.de
openSylab LIMS Dashboard — Übersicht über Proben, Aufträge und kritische Ergebnisse
Tamper-proof audit trail
ISO 15189 · auto-logged
Fits your existing IT landscape HL7 FHIR ISO 15189 DSGVO KIS / LIS CSV import

What is openSylab

Everything your lab needs day to day — in one system.

From sample intake to the released report, openSylab guides your whole lab day — securely documented and auditable at any time. Six reasons it stands apart from interchangeable software.

Accreditation

Every step provably logged

Every change to samples, orders and results is recorded automatically and tamper-proof. You walk into every ISO 15189 audit with complete evidence — no last-minute paperwork.

Integration

Talks to your existing systems

Results and orders flow directly between openSylab, your hospital information system and practice software — over the established HL7 and FHIR standards, with no costly middleware server.

Data privacy

Your data stays in-house

No US cloud, no lock-in to a single vendor. Patient data never leaves your premises — GDPR-compliant by design. And the software is yours: permanently and free of charge.

Economical

Runs on inexpensive hardware

No expensive database server, no dedicated IT team required. openSylab runs lean — even on a small machine right in the lab. A backup is simply: copy one file.

Security

Protection for sensitive data

Modern encryption, two-factor sign-in and finely graded access rights ensure only authorised people see what they're allowed to — traceable down to the single action.

Day to day

Built for everyday lab work

A clear, calm interface your team can actually work fast in — no gimmicks, just the figures and status cues that matter on the lab floor.


Inside the product

This is your lab day in openSylab.

Real screens from openSylab — overview, samples, orders, results with automatic flagging of abnormal values, and the complete audit log.

/dashboard
openSylab Dashboard — Echtzeit-Laborübersicht
Real-time overview: samples, orders, critical results and the activity chart.
/samples
openSylab Probenverwaltung — Probenliste mit Status-Filter und Barcode-Scan
Sample list with status filter and barcode scan. Deleted samples are retained for the audit log.
/orders
openSylab Auftragsverwaltung — Laboraufträge nach Dringlichkeit
Orders by urgency — from routine to emergency — with a clear status flow.
/results
openSylab Ergebnisse — Testergebnisse mit automatischer Wert-Markierung
Results with automatic flagging: abnormal and critical values are highlighted instantly.
/audit
openSylab Audit-Log — ISO-15189-konformes Prüf-Protokoll mit CSV-Export
The complete, ISO 15189-oriented audit log — filterable and exportable as CSV.
/dashboard · dark
openSylab Dark Mode — augenschonende Laboroberfläche für lange Schichten
Dark mode for long shifts — easy on the eyes and high-contrast.

Security

Security you can actually prove.

In healthcare, data protection isn't an add-on. Every safeguard is clearly named and independently verifiable — no “military-grade encryption” marketing. The technical detail below is there for your IT team and your auditors.

Passwords stored safely

Encrypted to current best practice — access stays protected even in the event of a breach. PBKDF2 · OWASP

Two-factor login

An extra code from an authenticator app — compatible with common apps like Google Authenticator.

Graded access rights

From administrator down to read-only — each person sees only what they're allowed to.

Tamper-proof log

Each entry is cryptographically chained to the previous one — any later tampering is immediately obvious.

Encrypted connection

Protection against automated attacks and end-to-end TLS encryption in operation.

For your IT team
opensylab — production start
# Production start with TLS & audit key
$ OPENSYLAB_JWT_SECRET="$(openssl rand -hex 32)" \
  OPENSYLAB_AUDIT_HMAC_KEY="$(openssl rand -hex 32)" \
  ./build/bin/OpenSylab --api --api-port 9443 \
    --tls-cert /etc/ssl/lims.crt \
    --tls-key  /etc/ssl/lims.key --force-https

[info] migrations: 12 applied, checksum OK
[info] audit hash-chain: verified ✓
[info] TLS 1.3 · RBAC enforced · rate-limit on
[info] listening on :9443 · status ok · v1.0.0
$ curl -s /api/v1/health
{"status":"ok","version":"1.0.0"}

Where it fits

Clinical compliance without the enterprise invoice.

Established systems like LabWare or STARLIMS start around USD 100,000 per year. openSylab ships the compliance core that matters, open source.

Capability
openSylab
Enterprise LIMS
License cost
MIT · 0 €
ab ~100.000 USD/yr
ISO 15189 audit trail
at the core
module-dependent
Database server required
no, SQLite
Oracle / MSSQL
Data sovereignty (GDPR)
Self-hosted
often US cloud
Native HL7 & FHIR
no middleware
add-on engine
Source inspectable
GitHub
proprietär

Honestly scoped

What openSylab is — and what it isn't.

Trust comes from clarity, not promises. So we're upfront about what openSylab is built for — and where its limits are.

What it's built for

Your digital lab backbone

  • Managing samples, orders, results and a complete audit trail.
  • A tool that supports your ISO 15189 documentation.
  • Self-hosted data infrastructure — fully under your control.
What it explicitly is not

Clear limits, named openly

  • Not an in-vitro diagnostic or medical device under the IVDR (EU) 2017/746.
  • Not a replacement for the operator's validation and accreditation duties.
  • Not designed for very high-throughput labs with many simultaneous writes.

v1.0.0 — first stable release. The core — samples, orders, results, audit trail, HL7/FHIR and access control — is production-ready, covered by 290+ automated tests (backend, frontend, end-to-end) and continuously checked in a CI pipeline. We accompany the move into production with hardening and validation — you don't go live alone. Regulatory responsibility for validation, accreditation and the diagnostic report stays with the lab operator; we support these processes but don't replace them.


Behind openSylab

Software from people who take lab IT seriously.

AurevionSec is [your name / your team] from Germany. openSylab grew from one simple conviction: a lab should own, understand and control the software it works with every day — instead of being tied to a vendor and its price list for years.

  • A direct line to the developer

    No call centre, no ticket limbo. You talk to the person who writes the code.

  • Open source as a promise

    No lock-in. The code is open — even without us you keep full control.

  • Focus over feature sprawl

    We build what labs actually need — and say no to the rest.

[Ihr Name]
Founder & developer · AurevionSec

"Your patient data belongs to you. Your software should, too."


AurevionSec · Services

The software is open source. We handle the rollout.

openSylab is yours — but getting a LIMS into validated, secure production is engineering work. That's exactly what we deliver: rollout, custom development and dependable support.

01

Rollout & deployment

From the first workshop to a production go-live in your infrastructure — cleanly installed, hardened and validated.

  • Requirements workshop & architecture
  • Secure installation on your premises
  • Migration of your data from the old system
  • Training for your team
Fixed-price project
02

Customizing & plugins

Your lab isn't off-the-shelf. We adapt workflows, fields and interfaces — or build plugins precisely to your needs.

  • Connecting your lab instruments
  • Interfaces to your HIS & practice software
  • Patient reports in your own layout
  • Paid premium plugins
Time & materials / license
03

Support & SLA contracts

A lab never stands still. We guarantee response times, security updates and a single named contact.

  • Guaranteed response times
  • Security & version updates
  • Health monitoring & backups
  • Audit support for accreditation
Annual contract

How we work

From the first question to live operation.

Four clear phases — no months of sales theatre. After the first call you already know where you stand.

1

Intro & analysis

A free first call and assessment: instruments, sample volume, interfaces, requirements. Outcome: an honest feasibility view and a concrete quote.

No obligation
2

Pilot & tailoring

Install in a test environment, customizing, connecting your instruments and systems, migrating a real data sample. You see openSylab with your own data.

2–6 weeks
3

Validation & go-live

Hardening, validation documentation for ISO 15189, training for your team and a controlled production start — accompanied, not overnight.

Guided
4

Operation & evolution

An SLA with guaranteed response times, updates, monitoring, a named contact — and new features when you need them.

Ongoing

Extensible

Premium plugins for real-world labs.

The core stays MIT-licensed and free. On top, we offer vetted paid extensions — as a license or bundled in a maintenance contract. A selection:

HL7 Connector Pro

Live, two-way link to your HIS — orders in, results out, fully automated.

Plugin · Lizenz

Instrument Bridge

Ready-made links for common lab instruments — readings land in the system automatically.

Plugin · Lizenz

Report Studio

Accreditation-ready reports with your letterhead, signature & QR verification.

Plugin · Lizenz

Insights & metrics

Turnaround times, utilisation and quality control at a glance.

Plugin · Lizenz

Backup & resilience

Automatic, encrypted backups and fast recovery in an emergency.

Plugin · SLA

Single sign-on

Sign in with your existing company login (e.g. Active Directory) — central user management included.

Plugin · Lizenz

FAQ

What lab managers ask first.

No answer that fits? Ask us directly — we reply honestly, not in marketing speak.

Ask a question
Is openSylab a medical device or IVD?

No. openSylab is a laboratory information and data-management system. It is not an in-vitro diagnostic or a medical device under the IVDR (EU) 2017/746. Diagnostic and regulatory responsibility stays with the lab operator — we support validation and documentation.

What if AurevionSec ceases to exist?

You lose nothing. openSylab is MIT-licensed, the full source is open on GitHub, and your data sits in an open file on your side. Any competent provider can take over operation — unlike proprietary software, there's no lock-in.

Is openSylab ready for production?

Yes. Version 1.0.0 is the first stable release — the core is production-ready and covered by 290+ automated tests (backend, frontend and end-to-end) running continuously in a CI pipeline. We accompany production use with rollout, hardening and validation. Changelog and roadmap are public on GitHub.

How does our data move from the old system?

Via CSV and HL7 import. As part of rollout we handle the migration of your master data and verify it against a real data sample before going live.

What about data protection and liability?

openSylab runs on your own infrastructure — patient data never leaves your premises, which greatly simplifies GDPR compliance. Legal responsibility for lab operation stays with you; we provide the technical basis (encryption, access control, audit trail) and support documentation.

Which labs is openSylab for?

For small and mid-size diagnostic labs — human, veterinary or environmental — that need clinical compliance but don't want six-figure enterprise licenses. Not ideal for high-throughput environments with very many simultaneous writes.

What does it all cost?

The software itself is free (MIT license). You pay for our services: rollout as a fixed-price or time-and-materials project, optional premium plugins as a license, and support/SLA on an annual contract. You get a concrete quote after the free first call.

Can we try it ourselves first?

Yes. openSylab is open on GitHub — you or your IT team can self-host and test it. If you like, we'll set up a pilot with your data.


Get started

Let's get your lab running on openSylab.

Tell us about your setup. We'll come back with an honest assessment — no sales fluff.

Reach us directly

AurevionSec — builders & operators of openSylab. Typical reply within one business day.

Standort
Germany · remote & on-site

Placeholder contact details — replace before publishing.

Sent encrypted. Your data stays with us.