Who holds what, and for how long.
Data responsibility on Beacon is layered: study teams own their study data, participants own their rights in it, and Beacon operates the infrastructure under both.
Roles
- Study teams (physicians, sponsors) determine what their study collects and are responsible for lawful basis, IRB/ethics oversight, and clinical decisions.
- BeaconCR operates the infrastructure: storage, capture, audit logging, and export tooling — as a service provider to the study team.
- Participants hold rights in their own data: to ask what is held, to withdraw, and to have consent honored as recorded — with the exact consent version linked to their record.
Collection and minimization
We collect what the workflow needs, not more. Each intake form maps its fields to a purpose; exports carry only the data the study team is entitled to, with de-identification options where registry use allows it.
Retention
Records are kept only as long as the study, the regulatory obligation, or the participant consent requires. Retention schedules are defined per data category, and deletion on withdrawal follows the consent terms the participant accepted.
Cross-border and access
Access to records is restricted to authorized study personnel and BeaconCR staff with a role-based need; every access is audit-logged with actor identity. Bulk exports require elevated permissions and are logged and revocable.
Data questions?
Study teams and participants both can ask how data is processed — we answer in plain language.