Authorization for use and disclosure of health information

Effective date: May 14, 2026
Version: 1.0

This Authorization lets Trialytics use and share the health information you provide to help match you with clinical trials and, if you choose to pursue a trial, to communicate with the research site on your behalf.

You do not have to sign this Authorization. You can use Trialytics to browse and search for trials without it. But to receive personalized matches based on your health information, or to have us contact research sites for you, this Authorization is required.

Please read this carefully before signing.

1. What information this Authorization covers

By signing, you authorize Trialytics to use and disclose the health information you provide through the Service, including:

Medical conditions, diagnoses, and disease stage
Biomarkers, genetic markers, and laboratory results
Current and prior medications and treatments
Performance status and functional measurements
Demographic information relevant to trial eligibility (age, sex, pregnancy status)
Documents you upload, such as pathology reports, imaging reports, or medication lists
Information you enter in your profile or search forms

You decide what to share. We will tell you what information is needed for any specific feature before you provide it.

2. Who is authorized to use this information

Trialytics, including our personnel and the service providers acting under our direction, including Google Cloud Platform under our Business Associate Agreement.

3. With whom this information may be shared

We may share your health information, only with your specific consent for each instance, with:

Clinical trial sites, sponsors, or research coordinators of a trial you have expressed interest in
A healthcare provider you have designated to assist with your trial search
A family member or caregiver you have specifically authorized

We will not share your health information with anyone else for any other purpose without your additional consent or as required by law.

4. Purpose of use and disclosure

We use and disclose your health information for the following purposes:

Matching. Comparing your profile against clinical trial eligibility criteria to identify trials that may be relevant to you.
Personalized explanations. Generating plain-language summaries of trial requirements as they apply to your specific situation.
Communication with trial sites. When you ask us to, contacting trial sites or sponsors on your behalf to express your interest and provide the information they need to assess your eligibility.
Service operation and improvement. We analyze aggregated or de-identified information — de-identified in accordance with the HIPAA standard (45 C.F.R. § 164.514) — to operate and improve the Service, including checking the accuracy of our eligibility assessments. We do not review your identifiable health information to improve the Service unless you give us separate, specific permission.

We do not use your health information to:

Train or fine-tune AI models. We do not use your health information to build or adjust the parameters of any AI model, and our service providers are contractually prohibited from doing so. (Measuring the quality of the Service is not training and changes no model.)
Send you marketing from third parties
Sell or rent to anyone

5. AI processing

To match your profile against trial criteria, we send your health information to Google Cloud Vertex AI (Gemini models) for processing. This processing is covered by our Business Associate Agreement with Google, which prohibits Google from using your information for any purpose other than providing the service to us, and prohibits training of Google's models on our customer data.

6. Right to revoke

You may revoke this Authorization at any time by:

Going to your account settings and selecting "Revoke health information authorization," or
Emailing [email protected] with the subject "Revoke HIPAA Authorization"

Revocation takes effect when we receive it. Once revoked:

We will stop using your health information for matching
We will stop sharing your health information with trial sites
We will delete your health information within 30 days, except as required for compliance with audit and breach notification laws

Revocation does not affect actions we took based on this Authorization before we received the revocation. For example, if we shared your information with a trial site before you revoked, that trial site may continue to use the information they received under their own policies.

7. Right not to sign

You do not have to sign this Authorization. You can still use Trialytics to:

Browse and search clinical trials anonymously
Read trial summaries
Use general informational features

You will not be denied general access to the Service if you do not sign. Signing is required only for personalized matching and trial site communication features.

8. Possibility of re-disclosure

Once we share your health information with a clinical trial site, sponsor, or other recipient with your consent, that recipient may use or further disclose the information under their own privacy practices. Information disclosed under this Authorization may no longer be protected by federal privacy laws once it reaches the recipient.

9. Expiration

This Authorization remains in effect until:

You revoke it (see Section 6), or
Three (3) years after the last activity on your account, whichever comes first.

After expiration, we will not use or disclose your health information under this Authorization. Information already used or disclosed before expiration is not affected.

10. How you sign this Authorization

You sign this Authorization electronically by:

Reading this document
Checking the box marked "I authorize Trialytics to use and disclose my health information as described in this Authorization"
Clicking "Continue"

We will record:

The version of this Authorization you signed
The date and time of signature
Your IP address and device

You can view your signed Authorization at any time in your account settings.

11. Your copy

A copy of this signed Authorization will be available in your account settings after you sign. You can request an emailed copy at any time by contacting [email protected].

12. Contact

Email: [email protected]

Trialytics
Bethesda, Maryland, United States

By signing this Authorization, you confirm that:

You have read and understand this Authorization
The health information you have provided or will provide is your own, or you have legal authority to provide it on behalf of someone else
You are signing voluntarily
You understand you may revoke this Authorization at any time