Trust is documentation, not adjectives.
This center states plainly what the platform does with data, what is in place today, what is on the roadmap, and what we will not claim. If something here is wrong or missing, we want to hear it.
Security
Encryption, access controls, audit logging, breach-response planning — and what we do and do not claim today.
ReadPrivacy
The Beacon Life Sciences LLC privacy policy for Beacon Clinical Registry.
ReadTerms
Terms of use, including SMS messaging terms.
ReadResponsible disclosure
How to report a suspected security issue, and our commitment to reporters.
ReadAccessibility
Our accessibility approach and how to report a barrier.
ReadHIPAA notice
What HIPAA-aware means here — designed to support HIPAA workflows, with no certification claims.
ReadData processing
Roles, lawful basis framing, retention, and participant rights in data processing.
ReadSubprocessors
The current subprocessor list — maintained as vendors change.
ReadStatus
Platform status and incident communication.
ReadThe one-sentence version
Patient records are encrypted at rest and in transit, every access is audit-logged, consent is versioned and linked to each participant, data is collected minimally and retained only as long as needed — and Beacon does not sell data, does not claim certifications it does not hold, and does not hide breach notifications.
A question the docs do not answer?
Covered entities can request a BAA discussion; anyone can ask how their data is handled.