IT & DATA SECURITY INFRASTRUCTURE
Uncompromising Encryption
Data is encrypted in transit and at rest using industry-standard protocols, protecting sensitive clinical and personal information at every stage.
Disaster Recovery
Documented recovery plans and regular backups are in place to minimize downtime and data loss in the event of a system failure.
Advanced Data Loss Prevention (DLP)
Controls that monitor and restrict the movement of sensitive data outside approved systems and channels, reducing the risk of accidental or unauthorized disclosure.
Information Security Policy
A formal, regularly reviewed information security policy governs how data is accessed, handled, and protected across the organization.
Information Classification and Handling
Data is classified by sensitivity level, with handling procedures matched to the risk associated with each classification.
Security and Backup Data Storage and Security
Study data is held on redundant, access-controlled storage with routine backup verification to safeguard against loss or corruption.
Antivirus & Threat Protection
Endpoint antivirus and threat-detection tools are kept current to guard against malware and emerging security risks.
Multi-Factor Authentication (MFA)
Access to critical systems and sensitive data requires an additional layer of identity verification beyond a password.
Site-to-client VPN
Encrypted site-to-client VPN connections give sponsors and remote team members secure access to shared systems and study data.
Endpoint Management and Security
Devices are centrally managed to enforce security configurations, keep software patched, and maintain consistent protection across endpoints.
Data Integrity Policy
Controls and audit trails ensure study data remains accurate, complete, and unaltered throughout its lifecycle.
Dynamic Ransomware Protection
Continuous monitoring and response measures are designed to detect and contain ransomware threats before they can spread.
Secure Office 365 Email Hosting
Company email runs on a secured, monitored Microsoft 365 environment with spam and phishing protection built in.

