Security and data boundaries
This page is maintained by TrialFlow to answer common security and privacy questions about our IBD recruitment software. It describes our current practices and is not an independent certification or audit report.
Data boundaries
TrialFlow does not connect to live hospital records and does not automatically identify real patients. IBD research organizations control what information they bring into a workspace.
Access control
Customer deployments are scoped per organization, with role-based access for reviewers and administrators. Enterprise engagements can include single sign-on.
Human review
Eligibility summaries and match scores are drafts, written for a person to check. GI study teams confirm every determination before it informs recruitment activity.
Reporting a concern
If you believe you have found a vulnerability or have a security question, email security@trialflow.ai and we will respond.