Security
Your trials are yours. We keep them that way.
Field-trial data is confidential to you and your sponsor. This page says plainly how ARIS stores it, who can reach it, and how you get it back out.
Your data, in your account
- Every trial, protocol and report is stored under your account and nobody else's account can read it.
- Data is encrypted in transit (TLS) and at rest in the database.
- Statistics and reports are computed on our servers from your data and the results are returned only to your session.
Sign-in you control
- Add two-factor authentication with any authenticator app (Google Authenticator, Authy, 1Password and others) from the account page, with backup codes for a lost phone.
- A seat is one person: two browsers and their phone. When a new device signs in past that limit the oldest session is signed out, and you can sign out every other device with one click.
- Sessions expire when they go unused, and the account page shows every device that is signed in.
Built for regulated work
- Every change to an assessment value is recorded with who, when and the reason for the change.
- Trials can be reviewed and locked so numbers cannot change after sign-off.
- The change history can be included as an audit section in the sponsor report, and treatment names can be blinded.
Never locked in
- Export any table to CSV, any report to PDF and Word, and your whole workspace as a backup file, at any time, from inside ARIS.
- If you stop, your data is kept and you can still export it.
- We do not sell your data, share it, or use it to train AI models. The details are in the Privacy Policy.
The platform
- ARIS runs in your browser; there is nothing to install, so there is nothing to keep patched on your computer.
- The application, the database and email all run on established cloud providers with their own security programs.
- Requests are rate-limited and filtered by a web application firewall before they reach ARIS.
- The free trial is approved by a person, so an account cannot be created and used anonymously.
The paperwork
The Terms of Service, Privacy Policy and End User License Agreement are public and short enough to read. Every account accepts them at sign-up and the acceptance is recorded.
Enterprise customers who need a signed agreement, a data-processing addendum or a security questionnaire completed can ask; that is part of the plan.
Run your next trial in ARIS.
Thirty days, the full product, no card. If it does not save you time on the first trial, you have lost nothing.