{"id":145154,"date":"2023-05-08T15:18:45","date_gmt":"2023-05-08T19:18:45","guid":{"rendered":"http:\/\/www.bu.edu\/tech\/?page_id=145154"},"modified":"2025-07-15T11:05:49","modified_gmt":"2025-07-15T15:05:49","slug":"non-managed-apps","status":"publish","type":"page","link":"https:\/\/www.bu.edu\/tech\/support\/information-security\/security-for-researchers\/non-managed-apps\/","title":{"rendered":"Apps Not Managed by BU"},"content":{"rendered":"<p>Since these apps are not managed by BU, accounts need to be removed or disabled when no longer required. Researchers and staff need to use strong passwords and two-factor authentication, even if not required by the app.<\/p>\n<p><strong>HIPAA Compliant for BU<\/strong>: We conducted a security review and obtained a HIPAA Business Associate Agreement with the vendor\/platform. Only health plans, health care clearinghouses, and health care providers who bill insurance companies have to comply with HIPAA. So, apps\/platforms listed under HIPAA compliant have gone through a BU InfoSec security review and have agreed to comply with HIPAA through a HIPAA Business Associate Agreement. These apps may be used by BU HIPAA Components. BMC Investigators should contact BMC to determine which apps are cleared for BMC research.<\/p>\n<p><strong>Restricted Use<\/strong>: personally identifiable human subject health data, such as diagnosis tied to email, phone #, or picture\/video of face<\/p>\n<p><span><span class=\"ui-provider fy b c d e f g h i j k l m n o p q r s t u v w x y z ab ac ae af ag ah ai aj ak\" dir=\"ltr\"><strong>Confidential<\/strong>: anonymized human subject health data (i.e., dates, city, Zip Code only) or personally identifiable human subject data that is not health related (e.g., texts per day, decision making).<\/span><\/span><\/p>\n<p>Click here to learn about Restricted Use and Confidential data classifications: <a href=\"http:\/\/www.bu.edu\/policies\/data-classification-policy\/\">www.bu.edu\/policies\/data-classification-policy\/<\/a><\/p>\n<div class=\"bu_collapsible_container \" aria-live=\"polite\" data-customize-animation=\"false\"><h3 class=\"bu_collapsible\" aria-expanded=\"false\"tabindex=\"0\" role=\"button\">HIPAA Compliant for BU<\/h3><div class=\"bu_collapsible_section\" style=\"display: none;\"><\/p>\n<p><strong>Constant Contact<\/strong><\/p>\n<ul>\n<li>Email Marketing Services<\/li>\n<li><a href=\"https:\/\/www.constantcontact.com\/\">https:\/\/www.constantcontact.com\/<\/a><\/li>\n<\/ul>\n<p><strong>DeDoose<\/strong><\/p>\n<ul>\n<li>A cross-platform app for analyzing qualitative and mixed methods research with text, photos, audio, videos, spreadsheet, data and more.<\/li>\n<li><a href=\"https:\/\/www.dedoose.com\/\">https:\/\/www.dedoose.com\/<\/a><\/li>\n<\/ul>\n<p><strong>Jet Mail Services<\/strong><\/p>\n<ul>\n<li><a href=\"https:\/\/www.jet-mail.com\/\">https:\/\/www.jet-mail.com\/<\/a><\/li>\n<\/ul>\n<p><strong>Wellpepper<\/strong><\/p>\n<ul>\n<li>It is an exercise tracker to engage and connect with patients and research subjects.<\/li>\n<li>It can be used for Restricted Use data if passwords are changed every 3 months.<\/li>\n<li><a href=\"https:\/\/www.wellpepper.com\/\">https:\/\/www.wellpepper.com\/<\/a><\/li>\n<\/ul>\n<p><\/div>\n<\/div>\n\n<div class=\"bu_collapsible_container \" aria-live=\"polite\" data-customize-animation=\"false\"><h3 class=\"bu_collapsible\" aria-expanded=\"false\"tabindex=\"0\" role=\"button\">Restricted Use<\/h3><div class=\"bu_collapsible_section\" style=\"display: none;\"><\/p>\n<p><strong>Agile Health<\/strong><\/p>\n<ul>\n<li>Can be used for patient or research subject communication, usually for health reminders.<\/li>\n<li>A coordinator must be appointed to complete quarterly access audits.<\/li>\n<li><a href=\"https:\/\/agilehealth.com\/\">https:\/\/agilehealth.com\/<\/a><\/li>\n<\/ul>\n<p><b>Aridhia<\/b><\/p>\n<ul>\n<li><span data-contrast=\"auto\" xml:lang=\"EN-US\" lang=\"EN-US\" class=\"TextRun SCXW267024039 BCX0\"><span class=\"NormalTextRun SCXW267024039 BCX0\">Aridhia<\/span><span class=\"NormalTextRun SCXW267024039 BCX0\"> is a research collaboration platform that will be used for de-<\/span><span class=\"NormalTextRun SCXW267024039 BCX0\">identifying<\/span><span class=\"NormalTextRun SCXW267024039 BCX0\"> individually identifiable human subject health data<\/span><span class=\"NormalTextRun SCXW267024039 BCX0\"> and sharing with other research sites<\/span><span class=\"NormalTextRun SCXW267024039 BCX0\">.<\/span><span class=\"NormalTextRun SCXW267024039 BCX0\"> \u00a0<\/span><\/span><\/li>\n<li><a href=\"https:\/\/www.aridhia.com\/\">https:\/\/www.aridhia.com\/<\/a><\/li>\n<\/ul>\n<ul><\/ul>\n<ul><\/ul>\n<ul><\/ul>\n<p><strong>BigHealth Sleepio and Daylight apps<\/strong><\/p>\n<ul>\n<li>Digital therapy apps.<\/li>\n<li><a href=\"https:\/\/bighealth.com\/daylight\/\">https:\/\/bighealth.com\/daylight\/<\/a><\/li>\n<\/ul>\n<p><b>Blank Slate<\/b><\/p>\n<ul>\n<li><span data-contrast=\"auto\" xml:lang=\"EN-US\" lang=\"EN-US\" class=\"TextRun SCXW267024039 BCX0\"><span class=\"NormalTextRun SCXW267024039 BCX0\"><span class=\"NormalTextRun SCXW92730943 BCX0\">Medical Campus researchers want to use BlankSlate.com to <\/span><span class=\"NormalTextRun SCXW92730943 BCX0\">provide<\/span><span class=\"NormalTextRun SCXW92730943 BCX0\"> training to human subject<\/span><span class=\"NormalTextRun SCXW92730943 BCX0\">s (research participants)<\/span><span class=\"NormalTextRun SCXW92730943 BCX0\">.<\/span>\u00a0\u00a0<\/span><\/span><\/li>\n<li><a href=\"https:\/\/blankslate.io\/\">https:\/\/blankslate.io\/<\/a><\/li>\n<\/ul>\n<ul><\/ul>\n<ul><\/ul>\n<p><strong>Brainwave Bank<\/strong><\/p>\n<ul>\n<li>Used to measure and track brain activity and cognitive performance by using a home usable EEG headset.<\/li>\n<li><a href=\"https:\/\/www.brainwavebank.com\/\">https:\/\/www.brainwavebank.com\/<\/a><\/li>\n<\/ul>\n<p><strong>BuildClinical<\/strong><\/p>\n<ul>\n<li>BuildClinical is a survey tool that can also be used offline settings.<\/li>\n<li><a href=\"https:\/\/www.buildclinical.com\/\">https:\/\/www.buildclinical.com\/<\/a><\/li>\n<\/ul>\n<p><strong>Calendly<\/strong><\/p>\n<ul>\n<li>Allow research participants to pick available meeting times.<\/li>\n<li>Calendly coordinates a scheduled time between researcher and participant.<\/li>\n<li><a href=\"https:\/\/calendly.com\/?utm_source=google&amp;utm_medium=cpc&amp;utm_campaign=SignUps_BrandExact_Search&amp;utm_adgroup=calendly_exact&amp;utm_content=calendly_exact&amp;utm_term=calendly&amp;utm_matchtype=e&amp;utm_targetid=kwd-309663638777&amp;utm_location=1018127&amp;utm_placement=&amp;utm_device=c&amp;gclid=CjwKCAiA_vKeBhAdEiwAFb_nrbuR2a1BZuCw2d7iAkI7dQtH_rdYiSWPqaQEDkQvVY_prQmaPTU25BoCi5YQAvD_BwE\">https:\/\/www.calendly.com\/<\/a><\/li>\n<\/ul>\n<p><strong>CommCare by Dimagi<\/strong><\/p>\n<ul>\n<li>Can be used to create offline data collection apps<\/li>\n<li><a href=\"https:\/\/www.dimagi.com\/commcare\/\">https:\/\/www.dimagi.com\/commcare\/<\/a><\/li>\n<\/ul>\n<p><strong>Curebase<\/strong><\/p>\n<ul>\n<li><span>Clinical trial management<\/span><\/li>\n<li><a href=\"https:\/\/www.curebase.com\/\">https:\/\/www.curebase.com\/<\/a><\/li>\n<\/ul>\n<p><strong>Eleos Health<\/strong><\/p>\n<ul>\n<li>Behavioral health with the power of AI.<\/li>\n<li><a href=\"https:\/\/eleos.health\/\">https:\/\/eleos.health\/<\/a><\/li>\n<\/ul>\n<p><strong>Exxat<\/strong><\/p>\n<ul>\n<li>Streamline your program&#8217;s data collection, document storage, contracts and daily workflows to manage your placements, curriculum, compliance and profiles for everyone in one place. Exxat Prism optimizes your program management.<\/li>\n<li><a href=\"https:\/\/exxat.com\/\">https:\/\/exxat.com\/<\/a><\/li>\n<\/ul>\n<p><strong><span class=\"NormalTextRun SpellingErrorV2Themed SCXW141971491 BCX0\">Gyrtics<\/span><\/strong><\/p>\n<ul>\n<li><span class=\"NormalTextRun SpellingErrorV2Themed SCXW141971491 BCX0\">Gyrtics<\/span><span class=\"NormalTextRun SCXW141971491 BCX0\"> is a non-BU, SaaS app\/platform that is <\/span><span class=\"NormalTextRun SCXW141971491 BCX0\">used by companies to get feedback on Facebook contests, rank\/reward programs, and \u2013 like here \u2013 level of engagement<\/span><span class=\"NormalTextRun SCXW141971491 BCX0\">.<\/span><\/li>\n<li><a href=\"https:\/\/grytics.com\/\">https:\/\/grytics.com\/<\/a><\/li>\n<\/ul>\n<p><strong>HelloHibou<\/strong><\/p>\n<ul>\n<li>Automated Daily Wellness Checking to Support Aging-in-Place<\/li>\n<li><a href=\"https:\/\/www.hellohibou.com\/\">https:\/\/www.hellohibou.com\/<\/a><\/li>\n<\/ul>\n<p><strong>Human API<\/strong><\/p>\n<ul>\n<li>Human API allows patients and research subjects to gather their medical records from multiple sources (e.g., BMC, Partners), and share them with researchers<\/li>\n<li><a href=\"https:\/\/www.humanapi.co\/\">https:\/\/www.humanapi.co\/<\/a><\/li>\n<\/ul>\n<p><strong>iMotions<\/strong><\/p>\n<ul>\n<li><span class=\"selectable-text copyable-text\">iMotions is the world\u2019s premier provider of human insights software.<\/span><\/li>\n<li><a href=\"https:\/\/imotions.com\/\">https:\/\/imotions.com\/<\/a><\/li>\n<\/ul>\n<ul><\/ul>\n<p><strong>Kernel<\/strong><\/p>\n<ul>\n<li>Using Kernel&#8217;s device and cloud instance allows analysis and image rendering for human activity.<\/li>\n<li><a href=\"https:\/\/www.kernel.com\/\">https:\/\/www.kernel.com\/<\/a><\/li>\n<\/ul>\n<p><strong>Linus Health<\/strong><\/p>\n<ul>\n<li>Can be used for brain health research, including coordination with other apps:\n<ul>\n<li>DANA (subjects identified by anonymous subject ID)<\/li>\n<li>Aural Analytics (subjects identified by anonymous subject ID)<\/li>\n<\/ul>\n<\/li>\n<li>A coordinator must be appointed to complete quarterly access audits.<\/li>\n<li><a href=\"https:\/\/linus.health\/\">https:\/\/linus.health\/<\/a><\/li>\n<\/ul>\n<p><strong>Lookit<\/strong><\/p>\n<ul>\n<li><span>MIT video storage platform for analyzing videos of children<\/span><\/li>\n<li><a href=\"https:\/\/lookit.mit.edu\/\">https:\/\/lookit.mit.edu\/<\/a><\/li>\n<\/ul>\n<p><strong>Medidata<\/strong><\/p>\n<ul>\n<li>Medidata provides clinical trial support services.<\/li>\n<li><a aria-label=\"Link https:\/\/www.medidata.com\/en\/\" id=\"menur3vp\" href=\"https:\/\/www.medidata.com\/en\/\" rel=\"noreferrer noopener\" target=\"_blank\" class=\"fui-Link ___1q1shib f2hkw1w f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1s184ao f1mk8lai fnbmjn9 f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh fhgqx19 f1olyrje f1p93eir f1nev41a f1h8hb77 f1lqvz6u f10aw75t fsle3fq f17ae5zn\" title=\"https:\/\/www.medidata.com\/en\/\">https:\/\/www.medidata.com\/en\/<\/a><\/li>\n<\/ul>\n<p><strong><span class=\"ui-provider vr vs vt vu vv vw vx vy vz wa wb wc wd we wf wg wh wi wj wk wl wm wn wo wp wq wr ws wt wu wv ww wx wy wz\" dir=\"ltr\">MetaOptima DermEngine<\/span><\/strong><\/p>\n<ul>\n<li><span data-teams=\"true\"><span class=\"ui-provider vr vs vt vu vv vw vx vy vz wa wb wc wd we wf wg wh wi wj wk wl wm wn wo wp wq wr ws wt wu wv ww wx wy wz\" dir=\"ltr\">App is used to scan skin, and platform is used to analyze for cancer and other issues<\/span><\/span><\/li>\n<li><a href=\"https:\/\/www.dermengine.com\/\">https:\/\/www.dermengine.com\/<\/a><\/li>\n<\/ul>\n<p><strong>MetaSource<\/strong><\/p>\n<ul>\n<li>Document scanning service<\/li>\n<li><a href=\"https:\/\/www.metasource.com\/document-scanning-services\/\">https:\/\/www.metasource.com\/document-scanning-services\/<\/a><\/li>\n<\/ul>\n<p><strong>MetricWire<\/strong><\/p>\n<ul>\n<li>Can be used to capture sensor data.<\/li>\n<li><a href=\"https:\/\/metricwire.com\/\">https:\/\/metricwire.com\/<\/a><\/li>\n<\/ul>\n<p><strong>MyMeds<\/strong><\/p>\n<ul>\n<li><span>MyMeds provides real-time data exchange for medication management, that can be used by researchers for gathering human subject medication information<\/span><\/li>\n<li><a href=\"https:\/\/my-meds.com\/\">https:\/\/my-meds.com\/<\/a><\/li>\n<\/ul>\n<ul><\/ul>\n<ul><\/ul>\n<ul><\/ul>\n<ul><\/ul>\n<p><strong>Seqster\u00a0<\/strong><\/p>\n<ul>\n<li>Can be used to collect patient medical records from multiple sources (e.g., BMC or Partners Healthcare)<\/li>\n<li>Allows the research subject to share all of their records with the research project.<\/li>\n<li>Can also be used to replace the use of HIPAA authorization forms.<\/li>\n<li><a href=\"https:\/\/www.seqster.com\/\">https:\/\/www.seqster.com\/<\/a><\/li>\n<\/ul>\n<ul><\/ul>\n<p><strong>Solo<\/strong><\/p>\n<ul>\n<li>Scans video to gather human emotion analysis data.<\/li>\n<li><a href=\"https:\/\/www.imsolo.ai\/\">https:\/\/www.imsolo.ai\/<\/a><\/li>\n<\/ul>\n<p><strong>SurveyCTO<\/strong><\/p>\n<ul>\n<li>SurveyCTO is a survey tool that can also be used offline settings.<\/li>\n<li><a href=\"https:\/\/www.surveycto.com\/\">https:\/\/www.surveycto.com\/<\/a><\/li>\n<\/ul>\n<p><strong>Tasso<\/strong><\/p>\n<ul>\n<li><span class=\"selectable-text copyable-text\">Tasso&#8217;s patient-centric devices are a digitally-enhanced solution for easy, virtually painless remote sample collection.<\/span><\/li>\n<li><a href=\"https:\/\/www.tassoinc.com\/\">https:\/\/www.tassoinc.com\/<\/a><\/li>\n<\/ul>\n<p><strong>Trialfacts<\/strong><\/p>\n<ul>\n<li>Recruits participants for study.<\/li>\n<li><a href=\"https:\/\/trialfacts.com\/\">https:\/\/trialfacts.com\/<\/a><\/li>\n<\/ul>\n<p><strong>Veeva SiteVault<\/strong><\/p>\n<ul>\n<li>Remote monitoring for clinical trials<\/li>\n<li><a href=\"https:\/\/www.veeva.com\/products\/sitevault\/\">https:\/\/www.veeva.com\/products\/sitevault\/<\/a><\/li>\n<\/ul>\n<p><strong>Washington University in St. Louis REDCap<\/strong><\/p>\n<ul>\n<li>The use and collaboration with other researchers must be approved by the Institutional Review Board.<\/li>\n<li>It has the same features as the BU REDCap.\n<ul class=\"ul1\"><\/ul>\n<\/li>\n<\/ul>\n<p><\/div>\n<\/div>\n\n<div class=\"bu_collapsible_container \" aria-live=\"polite\" data-customize-animation=\"false\"><h3 class=\"bu_collapsible\" aria-expanded=\"false\"tabindex=\"0\" role=\"button\">Confidential<\/h3><div class=\"bu_collapsible_section\" style=\"display: none;\"><\/p>\n<p><strong>Asana<\/strong><\/p>\n<ul>\n<li>Can be used for project management.<\/li>\n<li><a href=\"http:\/\/asana.com\/\">http:\/\/asana.com\/<\/a><\/li>\n<\/ul>\n<ul><\/ul>\n<ul><\/ul>\n<p><b>Blackboard Transact<\/b><\/p>\n<ul>\n<li><span data-contrast=\"auto\" xml:lang=\"EN-US\" lang=\"EN-US\" class=\"TextRun SCXW267024039 BCX0\"><span class=\"NormalTextRun SCXW267024039 BCX0\">Allows Student Life &amp; Engagement locations to accept MSU ID Cards for authorized access to events or for payment in business operations\u00a0<\/span><\/span><\/li>\n<li><a href=\"https:\/\/transactcampus.com\/\">https:\/\/transactcampus.com\/<\/a><\/li>\n<\/ul>\n<p><strong>Box<\/strong><\/p>\n<ul>\n<li>Securely collaborate with coworkers and participants.<\/li>\n<li><a href=\"https:\/\/www.box.com\/\">https:\/\/www.box.com\/<\/a><\/li>\n<\/ul>\n<ul><\/ul>\n<p><strong>Confluence or Jira by Atlassian<\/strong><\/p>\n<ul>\n<li>\n<div>Team Organization and Management<\/div>\n<\/li>\n<li><a href=\"https:\/\/www.atlassian.com\/software\/confluence\">https:\/\/www.atlassian.com\/software\/confluence<\/a><\/li>\n<li><a href=\"https:\/\/www.atlassian.com\/software\/jira\">https:\/\/www.atlassian.com\/software\/jira<\/a><\/li>\n<\/ul>\n<p><strong>MailGun<\/strong><\/p>\n<ul>\n<li><span>Can be used to send bulk emails to research participants, such as survey links or reminders but emails cannot be used for exchanging health information<\/span><\/li>\n<li><a href=\"https:\/\/www.mailgun.com\/\"><span>https:\/\/www.mailgun.com\/\u00a0<\/span><\/a><\/li>\n<\/ul>\n<p><b>Slack<\/b><\/p>\n<ul>\n<li>Can be used as a team communication tool.<\/li>\n<li><a href=\"https:\/\/slack.com\/\">https:\/\/slack.com\/<\/a><\/li>\n<\/ul>\n<ul><\/ul>\n<p><strong>Smartsheet<\/strong><\/p>\n<ul>\n<li><span>Can be used for research project planning and management<\/span><\/li>\n<li><a href=\"https:\/\/www.smartsheet.com\/\">https:\/\/www.smartsheet.com\/<\/a><\/li>\n<\/ul>\n<p><strong>Synapse AD Knowledge Portal<\/strong><\/p>\n<ul>\n<li><span>Knowledge portal approved by NIA for sharing anonymous or HIPAA Limited Data Set data<\/span><\/li>\n<li><span>This means that all identifiers have been removed except for dates (DOB, dates of treatment), city, and Zip Code<\/span><\/li>\n<li><a href=\"https:\/\/adknowledgeportal.synapse.org\/\">https:\/\/adknowledgeportal.synapse.org\/<\/a><\/li>\n<\/ul>\n<p><strong>Verasight<\/strong><\/p>\n<ul>\n<li>Sampling service that maintains an online opt-in panel of online survey respondents to participate in public opinion research<\/li>\n<li><a href=\"https:\/\/www.verasight.io\/\">https:\/\/www.verasight.io\/<\/a><\/li>\n<\/ul>\n<p><\/div>\n<\/div>\n\n<div class=\"bu_collapsible_container \" aria-live=\"polite\" data-customize-animation=\"false\"><h3 class=\"bu_collapsible\" aria-expanded=\"false\"tabindex=\"0\" role=\"button\">Apps Currently Under Review<\/h3><div class=\"bu_collapsible_section\" style=\"display: none;\"><\/p>\n<p>We are working on gathering security information about these apps. Until the security review is complete, please only use anonymized data. (e.g., identify subjects by Subject ID, anonymous emails).<\/p>\n<p><\/div>\n<\/div>\n\n<p><scribe-shadow id=\"crxjs-ext\" style=\"position: fixed; width: 0px; height: 0px; top: 0px; left: 0px; z-index: 2147483647; overflow: visible;\"><\/scribe-shadow><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Since these apps are not managed by BU, accounts need to be removed or disabled when no longer required. Researchers and staff need to use strong passwords and two-factor authentication, even if not required by the app. HIPAA Compliant for BU: We conducted a security review and obtained a HIPAA Business Associate Agreement with the&#8230;<\/p>\n","protected":false},"author":18978,"featured_media":0,"parent":139625,"menu_order":5,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"_links":{"self":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/145154"}],"collection":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/users\/18978"}],"replies":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/comments?post=145154"}],"version-history":[{"count":26,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/145154\/revisions"}],"predecessor-version":[{"id":158783,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/145154\/revisions\/158783"}],"up":[{"embeddable":true,"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/pages\/139625"}],"wp:attachment":[{"href":"https:\/\/www.bu.edu\/tech\/wp-json\/wp\/v2\/media?parent=145154"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}