IRBFlow is an institutional review board workflow built around audit-grade records, schema-driven forms, permission-aware search, and operational reporting — with a clean path to automated review.
Open the appThe demonstration environment contains synthetic data only. The demo uses a shared password; customer tenants sign in through institutional single sign-on.
Capabilities
IRBFlow connects intake, review, safety, meetings, reporting, and records retention. The same controls apply to every pathway, and every decision leaves evidence behind.
Search from the page you are already on: the dashboard, studies, safety, or meetings. IRBFlow searches studies, submissions, documents, safety reports, and meeting minutes in one place, then filters every result by tenant, role, study membership, and meeting attendance. Researchers find their own protocols; reviewers find the review load; nobody sees another institution’s records. Search is a capability across the product, not a separate screen.
Conditional applications, clarification and resubmission, and the five determination types on one review lane, each with its own letter.
Field-level answer diffs and document version/SHA comparisons against the last approved submission, reviewed as a modification.
Approval windows, 60/30/7-day reminders, automatic expiry, and renewals that preserve the existing approval when a renewal is not approved.
Chairs, voting members, coordinators, and alternates; expedited and full-board routing; a reviewer inbox with due dates and a staff workload view.
Adverse events, serious adverse events, unanticipated problems, deviations, and emergency use linked to one or more studies, with severity, relatedness, assignment, and a recorded outcome.
Request, pre-review, decide, and amend external IRB reliance. Track participating sites and local PIs, and send each active site its own determination letter.
Schedule convened review, invite attendees and record attendance, build a study-linked agenda, link board materials, and record outcomes and minutes.
Turnaround, volume, determinations, expirations, workload, and safety reports, plus tenant-defined custom reports over approved datasets. Export as HTML, CSV, JSON, tagged PDF, or XLSX.
Step-up authenticated electronic signatures with an attested meaning, a canonical record hash, and a signed audit event for each determination.
Hash-chained audit events, configurable retention by record type, legal holds, deletion certificates, and auditable corrections that preserve before/after history.
Row-level tenant isolation in PostgreSQL, institutional OIDC single sign-on, role-based permissions, and an access roster for periodic review.
One reviewed configuration creates the tenant, standard roles, forms, workflows, letters, and committees and attaches the institution’s OIDC or SAML provider and email domains. Branding, the first administrator, a staging rehearsal, domain checks, and a confirmed demo teardown are part of the same onboarding flow, not afterthoughts.
Malware scanning before storage, versioned object storage, nightly database backups, and a tenant export and destructive-offboarding path with certificates.