Data Ownership & Privacy Commitment
Privacy by Design
BlitzTrials was designed around a simple principle: Your participant data belongs to you.
The platform does not require investigators to provide participant names, identification numbers, email addresses, phone numbers, addresses, or other personally identifying information (PII) for standard assessment deployment.
Where possible, BlitzTrials operates using anonymized or pseudonymous participant access tokens rather than personal identifiers.
1. Research Data Remains Under Your Control
BlitzTrials is designed to facilitate assessment delivery, scoring, and workflow management while allowing investigators to retain full ownership and control of their research datasets.
Investigators are responsible for storing, managing, securing, and backing up any participant-identifiable information maintained within their own institutional systems, databases, spreadsheets, or records.
2. Platform Architecture & Data Minimization
BlitzTrials is designed to minimize the collection and storage of participant-identifying information wherever possible. For standard deployments, participant identities are not required for assessment access, scoring, or token-based participation workflows.
3. Investigator Security Recommendations
For studies involving identifiable participant information, investigators are strongly encouraged to follow institutional best practices:
- Decouple Data: Store sensitive personal information separately from raw assessment data.
- Leverage Institutional Tools: Use institutional storage systems (e.g., secure university servers) whenever available.
- Encrypt Files: Implement appropriate encryption and access controls for all master linking logs.
- Restrict Access: Ensure access to identifying information is limited to authorized study personnel only.
- Maintain Compliance: Follow all applicable institutional, regulatory, and ethics committee (e.g., IRB) requirements.
Important Notice: While BlitzTrials is explicitly designed to reduce privacy risks by minimizing the need for participant-identifying information, investigators remain solely responsible for ensuring their use of the platform complies with their institution's data governance policies, ethics approval requirements, and applicable privacy laws.