Trust and data
Your data stays yours.
What we commit to, how AI is used, what your records show and where your data lives. Plain answers for your site's security and privacy review, with every policy and agreement summary in one place.
Our commitments
The same promises appear in our terms, data processing and agreement summaries.
We never sell your data.
Not to advertisers, data brokers or anyone else. Your study records are yours.
Your data is never used to train AI models — ours or Google's.
AI features answer the request in front of them. Your records are not used to improve a model.
Kyros staff don't access your records except when you ask for support or the law requires it.
That access is limited to named people and logged.
No advertising pixels or analytics on participant pages.
Prescreen, participant portal, form and session pages carry no ad trackers or analytics scripts.
How AI is used
AI helps your staff write faster. People stay responsible for every record. Read the AI use policy.
- Drafts only
- AI writes assistive drafts, such as an adverse-event narrative or a sponsor email. It does not create records on its own.
- A named person approves
- A named staff member reviews and approves each draft before it is used.
- It never acts alone
- AI never decides eligibility, never signs and never sends anything on its own.
- Every request is logged
- Each AI request and output is logged with the model version and the person who approved it.
- Identifiers removed first
- Before a prompt leaves the app, a filter removes names it knows belong to the record, email addresses, phone numbers, street addresses, dates of birth, medical record and Social Security numbers, and turns exact dates into study days. Free text can still hold details a filter misses, so keep prompts to what the task needs.
Where AI runs
AI features run on Google Vertex AI under a signed HIPAA Business Associate Agreement; Google processes requests only to return a response and does not use them to train its models.
Records you can stand behind
Every change and signature leaves evidence a monitor or inspector can follow.
Audit trail
Time-stamped audit trail of every change, with user, before/after values and reason.
E-signatures
Signatures record the signer, date, time and meaning, and require re-entering a password.
Access by role and study
Each person sees only the studies and actions their role allows.
Blinding
Treatment assignment is visible only to unblinded roles.
Supports 21 CFR Part 11 controls (audit trail, e-signatures with re-authentication, access controls). Compliance depends on how each site validates and uses the system.
Read the Part 11 statementWhere data lives
Hosting and providers
Data is encrypted in transit and at rest. Hosting details, subprocessors and BAAs are listed in our subprocessor notice, available on request.
Read the subprocessor summaryExport any time
Export your data whenever you want: CDISC ODM 1.3.2 and SDTM-aligned CSV for sponsors, plus PDF and CSV, including audit trails and signatures.
Read the retention and exit policyCommon questions
Will you sign a BAA?
Yes. A Business Associate Agreement is part of our contract set. Read the BAA summary for its current status and how to request the full agreement.
Read the BAA summaryDo you sell or share data?
No. We never sell your data. It is processed by the service providers that help us run Kyros Trials, for the tasks set out in our subprocessor notice, which is available on request.
Read the subprocessor summaryIs my data used to train AI?
No. Your data is never used to train AI models, ours or anyone else's. AI requests are processed to return a draft, and each one is logged.
Read the AI use policyCan we leave and take our data?
Yes. Export everything at any time, including audit trails and signatures, with no fee and no ticket. We do not delete customer data for non-payment.
Read the retention and exit policyPolicies and agreements
Customer agreements are published as summaries. Request the full documents for your site's review.
Public policies
Bring your security questions to the demo.
We will walk through the audit trail, signatures and access settings on sample records, and answer your review checklist.