INFO +358 40 834 5238 FI

Reliable and compliant eCRF for clinical studies

Granitics eCRF is a reliable and validated system for clinical research data management. Its design takes into account the requirements that authorities in the EU and the US place on data management systems.

Standards and regulations taken into account

The system supports compliance with the requirements of the ICH GCP E6(R3) guideline, the FDA 21 CFR Part 11 regulation and the ISO 14155:2020 standard. These requirements have been taken into account in the system's design, development and validation.

Strict requirements for subcontractors

We extend our requirements to our subcontractors as well, because the entire chain has to work properly. For example, we require ISO 27001 certification from the service provider responsible for maintaining the system. We also require subcontractors to have documented and compliant procedures, particularly with regard to information security.

Secure access and use

The system includes two-factor authentication and continuous monitoring of use. The study is responsible for ensuring that the right people have appropriate rights and access only to the information relevant to them. This is made easier by the information the system provides on user roles and rights.

Information security and data location

Study data includes health information, so information security is a key requirement in how the service is delivered and maintained. The main principles are summarised below, and a more detailed description is provided to customers in an information security statement.

Data stays in Finland

The service and its data are located in Finland, in a data centre whose information security management system is ISO/IEC 27001 certified. Data is not transferred outside the EU or EEA unless required by law or by an order of an authority.

Daily backups

Data is backed up once a day with versioning, and backups are retained for at least six months. Restoring from a backup is tested at least twice a year.

Protected access and encrypted traffic

Access to the study team's system is restricted to networks specified by the customer, and logging in always requires two-factor authentication. All user interface traffic is encrypted.

Data protection agreed by contract

The customer is the controller of the study data, and Granitics Ltd acts as the processor of personal data. The processing is agreed in a data processing agreement in accordance with the GDPR.

Explore the features of Granitics eCRF

Explore our other features too. Together they cover your study's data collection from planning to analysis.

Free online demo

May we show you Granitics eCRF?

In an online demo, we present the features and functions of the eCRF and discuss how it could improve your research. The demo is free of charge and without obligation.