Trust Center
Welcome to Crucial Data Solutions's Trust Center. Our commitment to data security and privacy is embedded in every part of our business, alongside our dedication to providing a quality product. Use this Trust Center to learn about our security posture and quality management practices. You are also encouraged to look at the knowledge base further down this page to see other answers to common questions.
If you are a customer auditing or qualifying Crucial Data Solutions, please request access to detailed information and documentation from this page. Once that is approved, you will get full access with the ability to engage in private conversation with our Security and QA teams on relevant topics.
Google
Verily
ICON plc
Stryker
Catalyst Clinical Research
- Quality Management: Does your organization have a process for managing Third Parties/Vendors to ensure ongoing quality and compliance?
- How does CDS handle or approach privacy by design (PbD)?
- Would Customer data be encrypted in motion using industry standard technologies?
- Privacy: To company's knowledge, has company ever been subject to surveillance by a public authority and/or have any of company's communications containing personal data of company's clients or customers ever been accessed and/or intercepted by a public authority?
- Where can I quickly find information about CDS' quality management practices.
Trust Center Updates
Vulnerabilities
PHP Vulnerability
CDS is aware of the recently disclosed critical PHP vulnerability and has taken steps to assess its potential impact on our environment. As of October 21, assessment of systems shows no vulnerability issues. Internal vulnerability scans continue in case of other globally-discovered issues. The protection and security of customer data is a critical priority for the TrialKit platform and related infrastructure, and we will continue to provide updates in case of any discovered risks.
Updated US HIPAA Security Rules Upcoming
In January 2025, the U.S. Department of Health and Human Services proposed new regulations to enhance cybersecurity protections for electronic protected health information (ePHI) under HIPAA. Key proposed changes include mandatory annual technical inventories, enhanced security risk assessments, and mandatory multi-factor authentication (MFA). These updates aim to strengthen security controls and ensure greater protection of ePHI.
Crucial Data Solutions is tracking this and remaining in compliance with best practices of health information security.
Welcome to CDS' new Trust Center
CDS is launching this trust center as an improved mode of transparency to our customers.