Quorin Technologies · Archon

Records an assessor can verify, on a server you control.

Archon is a self-hosted electronic lab notebook and accreditation system for laboratories that cannot put their data in someone else’s cloud. Every entry, signature and change is sealed into a per-laboratory SHA-256 hash chain — so integrity is something you can demonstrate on demand, not something you ask to be believed.

The full notebook is free and permanent — unlimited users, on your own infrastructure. A licence unlocks the accreditation tooling, and 5 of 5 pilot places are still open.

audit_log

Chain verification

Verified
  1. 1041sample.created08:12

    Sample AB-4471 registered · T. Mudimu

    prev
    computing…
    hash
    computing…
  2. 1042notebook.created09:03

    Assay run 12 — plate A · T. Mudimu

    prev
    computing…
    hash
    computing…
  3. 1043notebook.updated09:41

    Result recorded — 4.82 mg/L · R. Chikafu

    prev
    computing…
    hash
    computing…
  4. 1044notebook.finalized09:58

    Signed — author, e-signature · R. Chikafu

    prev
    computing…
    hash
    computing…
  5. 1045sample.completed10:15

    Sample AB-4471 released · T. Mudimu

    prev
    computing…
    hash
    computing…

Real SHA-256, computed in your browser over the rows above. Archon links every audit entry to its predecessor the same way, so an altered record cannot be made to fit back in.

Why Archon exists

Written for the laboratories the cloud vendors are not allowed to serve

The data cannot leave the building

Ministry policy, ethics approval and grant conditions routinely prohibit moving laboratory data offshore. That rules out the hosted notebooks before a single feature is compared. Archon runs on your own server, and there is nothing to negotiate about where records live.

Accreditation is not a notebook feature

For a testing laboratory, ISO/IEC 17025 is a licence to operate. An assessor does not ask to see your notes — they ask who did the work, under which method, when, and for proof that the record has not changed since. That is a different job from storing text.

A free notebook stops at the notes

Self-hosted notebooks will hold your entries, and some do it well. What they will not do is score you against a standard from your live data, keep a competency matrix current, or produce a dated evidence pack on the morning of an assessment.

Integrity

The audit trail is the product. Everything else is built on it.

Most systems treat the audit log as a report. In Archon it is a data structure: each entry is hashed together with the hash of the one before it, so the log defends its own history rather than describing it.

This satisfies what 21 CFR Part 11 §11.10(e) asks of an audit trail — secure, computer-generated, time-stamped, and unable to obscure previously recorded information — and supports the records requirements in ISO/IEC 17025 §7.5 and §8.4.

Hashing and electronic signatures are not licensed capabilities. They are present in every deployment, including the free one, permanently. What a licence pays for is the ability to demonstrate integrity to an assessor — not to have it.

Every mutation is logged, or it does not happen
Creating, changing and deleting anything writes an audit entry through a single append path. There is no second route into the log, and no action that quietly skips it.
Appends are serialized per laboratory
A Postgres advisory lock orders concurrent writers, so two people saving at the same moment cannot fork the chain or leave a gap in the index.
Signing a notebook entry closes it
Finalization captures an electronic signature with password re-authentication, and records the signer, the meaning of the signature and a digest binding it to the exact content signed. A finalized entry has no edit path — correction is a new, linked record.
Export the chain head, verify against it later
Publishing the current head lets you prove at any future date that history has not been rewritten behind you — including by whoever administers the database.

What you run

One system for the daily record and the evidence built on top of it

In every deployment, free and permanent

Electronic lab notebook
Rich-text entries in folders, with versioned drafts and irreversible signed finalization.
Samples
Registration, custody and status through the life of a specimen, linked to the work done on it.
Protocols
Reusable method templates, and a record of each execution against the template it came from.
Controlled SOPs
Standard operating procedures with review dates, so the version in use is the approved one.
Inventory
Reagents and consumables with quantities and locations, referenced from the work that consumed them.
Projects and research
Studies and datasets grouped so a body of work can be reviewed, archived and found again.
Audit trail
The full hash-chained log, readable and exportable by anyone with the right to see it.
Roles and access control
Owner, administrator and member per laboratory, enforced on every read of every record.

Unlocked by a licence

Compliance frameworks
Adopt ISO/IEC 17025, 21 CFR Part 11, GLP, ALCOA+ and more, and work their requirements in one place.
Accreditation readiness
A continuous clause-by-clause score derived from live data rather than from a questionnaire.
Quality management
Nonconformity and CAPA with enforced effectiveness review, competency matrix, calibration scheduling.
Environmental monitoring
Live temperature and humidity from storage and instruments, with excursion alerts and a continuous record.
Verification and evidence packs
Re-verify the whole chain on demand, export the head, and generate a dated assessor evidence document.
API and webhooks
Versioned REST API with scoped keys and HMAC-signed outbound webhooks, for instruments and downstream systems.

Accreditation

A readiness score that is measured, not self-reported

Readiness is derived by probing your live data. A clause about equipment calibration is satisfied by calibration records that exist and are current, not by someone ticking a box to say they are.

Requirements that can be measured, are

Probes read the same records the laboratory works in every day. When a competency certificate lapses or a calibration falls due, the score moves on its own — nobody has to remember to update a spreadsheet.

Requirements that cannot be, are excluded until attested

A clause needing human judgement stays out of the denominator until somebody attests to it. It is the difference between a percentage that means something and one that only measures how optimistic the last person to open the checklist was.

Evidence packs, generated on the day

One dated, hash-sealed document covering integrity, competency, calibration, controlled documents and nonconformities. It is self-contained HTML with no external assets, so it opens on an air-gapped machine and reads the same in five years.

Frameworks included

  • ISO/IEC 17025
  • FDA 21 CFR Part 11
  • WHO Good Laboratory Practice
  • OECD Good Laboratory Practice
  • ALCOA+ Data Integrity
  • ICH Q10 Pharmaceutical Quality System
  • GCP – ICH E6(R2)
  • FAIR Data Principles

Archon helps you demonstrate compliance with these standards. It does not confer accreditation, and no software can — the decision belongs to your accreditation body.

Self-hosting

Commitments we have written into the product, not just the brochure

Each of these is enforced in code or committed to in the terms of service, and each is checkable. That matters more than usual here: a laboratory buying a data-integrity system is exactly the customer who will check.

No telemetry, and no phone-home licence check

Licences are signed tokens verified offline against a public key bundled with the software. An air-gapped deployment works normally, and nothing about your usage is reported to us — there is no channel by which it could be.

No remote kill switch. Not now, not later

There is no mechanism by which Quorin can disable your deployment, and the terms of service commit us to that. Enforcement, where it exists, revokes paid capabilities. It never takes away the software.

An expired licence degrades to Free, after 14 days of grace

Institutional renewals move at the speed of a finance office. Paid capabilities pause; every entry, signature and audit record stays readable and exportable, indefinitely. A laboratory is never locked out of its own records.

Unlimited users at every tier, including Free

Seat caps push laboratories into shared logins, shared logins destroy attribution, and attribution is the entire point of an audit trail. There is no seat field in the pricing model, deliberately.

We are normally neither controller nor processor of your data

In a standard self-hosted deployment we hold no copy of your laboratory records. A data processing agreement exists anyway, because an assessor will want one on file.

The AI assistant is off by default, and says so where it counts

If you switch it to a cloud provider, that choice is surfaced as a failed control on your own accreditation dashboard. A sovereignty claim that can be quietly broken from a settings page is not a sovereignty claim.

Read the security statement and the data processing agreement.

Pricing

Priced per laboratory, per year. Never per person.

Paid plans are sold by quotation and invoice, because institutional laboratories buy by purchase order and bank transfer. A licence you can only obtain through a card form is one a ministry laboratory cannot buy at all.

Free

$0

self-hosted, unlimited users

A complete electronic lab notebook that is yours permanently. Not a trial, and not crippled.

Professional

$9,000

per laboratory / year

Everything needed to assess your own compliance continuously and prove it to an assessor.

Accredited

$18,000

per laboratory / year

For laboratories under formal qualification obligations, and the buyers who audit them.

Network

From $3,000

per site / year

For ministries, reference networks and multi-site groups running many laboratories under one quality system.

Pilot programme

5 of 5 places left

5 laboratories, 60 days of the full Accredited tier — no card and nothing to cancel. It expires on its own and drops back to Free; nothing is lost and nothing auto-renews.

Places are given out directly rather than published. Ask us for one at quorinstartup@proton.me, then redeem it under Settings → Billing.

Create a laboratory

Run it yourself

Start with the free notebook

The complete ELN, the audit chain and electronic signatures, on your own infrastructure, with unlimited users. Not a trial — there is no date on which it stops working.

Create a laboratory

Buy through procurement

Ask for a written quotation

Tell us the laboratory, the country and how many sites. We reply with a quotation and the terms attached, invoice on acceptance, and issue your signed licence key when payment clears. No account needed to ask.

quorinstartup@proton.me

Quorin Technologies is an early-stage company and Archon is a young product. We would rather you knew that from the landing page than discovered it after a purchase order — which is what the pilot programme, the permanent free tier and the never-lock-you-out policy are all for.