Security and personal data

Passwords, lockout, sessions, where data is stored.

Passwords are stored only as hashes; minimum length is 10 characters.
After 8 failed attempts sign-in is blocked for 15 minutes.
All forms are protected against request forgery (CSRF); the browser is not allowed to load third-party scripts.
“Sign out on all devices” ends every session.
Two-step sign-in: after the password, a code from an authenticator app (TOTP, works without mail, with 10 one-time recovery codes) or a code from the e-mail. A person switches it on in the Profile, or a project's owner for the whole team, and either way satisfies the project; off by default. The app's key is stored in the database only encrypted, the recovery codes only as hashes. Details: Your account.
The audit trail is append-only and hash-chained; integrity is checked every night.
The database is backed up every night and backups are kept for 14 days.
A new account opens only after its e-mail is confirmed; the forms are protected from bots without outside services. Details with diagrams: E-mail confirmation, bots, deleting users.
People of CROs and sponsors can sign in with their company account and its second factor: “Sign-in with the company account (SSO)”.

Personal data encryption

Personal data encryption in the database is postponed until the production installation: for now the patients’ data are stored as the rest of the study’s data, on the portal’s server. The data the stage-a.18 release encrypted (the patient’s e-mail for ePRO reminders, the name and signature in the remote consent, the notes of contact attempts, the key of pseudonyms) were decrypted by the update without loss. The audit trail of each such study has an “On → Off” record with the number of values decrypted.

For the production installation encryption will be switched on per study: its owner switches it on in the project’s settings, the Security block, and gets a recovery key once.

Personal data

This installation keeps data on a server in Russia. The portal sends no data to third-party services: fonts, scripts and styles are served by the portal itself. See Personal data.

Honest status. This is a test, non-commercial installation. We do not claim full compliance with 21 CFR Part 11, GCP or data protection laws: validation and documents come before any work with real patients.