Security
Protocols are confidential. This page states plainly how Cardinal treats yours.
Your data stays yours
Cardinal never trains a model on your data. Your protocols and source documents are used to serve you and no one else.
Encrypted and isolated
Customer data is encrypted with AES-256. Each customer's data is separated with row-level isolation, so one sponsor's information is not visible to another.
Grounded, never fabricated
Every clinical claim Cardinal drafts is traced to your Investigator's Brochure, so your team can check each line against its source.
Your team decides
All flags are advisory. Cardinal never finalizes a clinical or statistical decision. Every change is tracked in an audit log.
Before you share anything
We sign a mutual NDA before we look at a live protocol.
Security documentation
Procurement and quality teams can request our security documentation and answer a due-diligence questionnaire at info@merquell.com.
Report a vulnerability
If you believe you have found a security issue, email info@merquell.com with the details. Please give us reasonable time to respond before disclosing it publicly.