REDCap Compliance 

The University of Alberta installation of REDCap is licensed from Vanderbilt University and installed in the University of Alberta data centre. The system is managed by a team at the Women & Children’s Health Research Institute (WCHRI) with support from the university’s IT group (IST). While the REDCap software is generally considered to be capable of compliance with recognised standards such as the US Code of Federal Regulations 21 Part 11, European GDPR, and applicable security standards such as NIST, compliance is dependent upon local implementation and study level policy and procedure. The University of Alberta maintains a REDCap installation (the MICYRN instance) that is validated in compliance with GCP and Division 5 of Canada’s Food and Drug regulation. Additional information regarding security can be found in this document: University of Alberta REDCap Security.

The REDCap software is installed in a University of Alberta data centre and operates in a complex, virtualized environment. This entire environment is subject to University of Alberta disaster recovery policy and procedures, which are reviewed and updated on a regular basis.