TrialScale
Legal Disclosures

Privacy Policy

Last Updated: September 2026

1. Scope and Commitments

TrialScale ("we", "our", or "us") provides a modern clinical trial management system (CTMS) designed for clinical research sponsors, contract research organizations (CROs), and investigative sites. We are committed to protecting the privacy, confidentiality, and security of all personal and organizational data entrusted to us.

2. Clinical Data Integrity & PHI Governance

TrialScale operates as a Business Associate where applicable under the Health Insurance Portability and Accountability Act (HIPAA). Clinical study data entered into the platform is segregated under strict tenant isolation, encrypted in transit (TLS 1.3) and at rest (AES-256), and protected by role-based access controls (RBAC) in accordance with GxP and 21 CFR Part 11 requirements.

3. Marketing Site Information Collection

When you request an executive demo, submit a qualification inquiry, or request whitepapers through this site, we collect your name, business email, organization, professional title, and study interest details. We use this information solely to fulfill your request and communicate with you about TrialScale solutions.

4. Information Sharing & Disclosures

We do not sell, rent, or trade your personal information. We share data only with verified service providers assisting in our operations (such as infrastructure hosting, bot prevention, and communications services) under binding confidentiality agreements.

5. Contact & Data Subject Inquiries

For questions regarding this policy or to exercise data privacy rights under applicable laws, contact our data protection team at privacy@trialscale.com.

Essential cookies are required; site analytics are optional.

TrialScale Cookie & Telemetry Policy

As a clinical operations technology platform designed for 21 CFR Part 11 and EU Annex 11 alignment, TrialScale maintains strict data integrity and privacy boundaries. We categorize browser storage into two distinct classes:

1. Strictly Necessary Storage (Always Active)Required

Essential for core website operation, CSRF/bot mitigation (Cloudflare Turnstile token validation), and theme persistence. These tokens do not track users across domains and cannot be turned off.

2. Google Analytics (GA4) TelemetryOptional

Measures aggregate interaction metrics (session length, page scroll depth, device viewport) without collecting HIPAA PHI or clinical study subject data. IP anonymization is enforced by default.