Privacy, Security & Recruitment Workflow

Our role

We develop creative and deliver leads; research sites perform screening and consent. We operate at the top of the recruitment funnel: campaigns, a study information page, and secure handoff of the resulting leads. Eligibility screening, informed consent for participation, and the conduct of the trial are performed by the research site under its own IRB-approved process.

What data we handle

For recruitment we process the contact information a prospective participant submits through a campaign (typically name, email, phone, and the answers to any pre-screen questions the site's IRB has approved), together with the consent captured at submission and the campaign source.

Controls we have implemented

• Contact data is encrypted in our systems.
• Every lead is stored with the consent captured at submission and its campaign source.
• Leads are delivered to the site by signed webhook or authenticated pull — not by open email.
• Access to lead data is authenticated, and access and delivery are recorded in an audit log.
• Patient-facing intake is disabled on this site; we do not accept trial applications here.

This list reflects controls in place today. We will add items here only as we implement and test them — not in advance.

Business Associate Agreements

Whether a BAA is appropriate depends on the engagement and the data involved. We will confirm BAA availability for a specific engagement once our subprocessor chain for that engagement has been verified. We do not make a blanket BAA claim.

Recruitment workflow

Creative and study materials are prepared, the site's IRB approves them, campaigns launch, consented leads are delivered securely to the site, and outcomes are tracked to keep spend on what enrolls. See How It Works for the step-by-step.

Contact

Privacy questions: privacy@clinicaltrialspot.com.