Data sharing across decentralized clinical trials using customized data access policies

A server system comprising:

• one or more computers;
• and
• one or more computer-readable media storing instructions that, when executed by the one or more computers of the server system, are operable to cause the server system to perform operations comprising:
• storing, by the server system, data collected through a multi-tenant data access platform configured to collect data for each of multiple tenant organizations and to selectively make the collected data available according to policies associated with the respective tenant organizations, wherein the data is stored in association with organization hierarchy data and policy data for the respective tenant organizations;
• receiving, by the server system, a data access request associated with a user, the data access request involving data for a first unit of a tenant organization;
• in response to receiving the data access request, using, by the server system, the organization hierarchy data to determine that the user is associated with a second unit of the tenant organization;
• accessing, by the server system, a portion of the policy data for the tenant organization that indicates a level of data access with which the second unit of the tenant organization is permitted to access data of the first unit of the tenant organization;
• identifying, by the server system, a subset of the data of the first unit of the tenant organization, wherein the subset is limited according to the accessed portion of the policy data;
• and
• providing, by the server system, a response to the data access request that is based on the identified subset of the data for the first unit of the tenant organization.

One or more non-transitory computer-readable media storing instructions that, when executed by the one or more computers of a server system, are operable to cause the server system to perform operations comprising:

• storing, by the server system, data collected through a multi-tenant data access platform configured to collect data for each of multiple tenant organizations and to selectively make the collected data available according to policies associated with the respective tenant organizations, wherein the data is stored in association with organization hierarchy data and policy data for the respective tenant organizations;
• receiving, by the server system, a data access request associated with a user, the data access request involving data for a first unit of a tenant organization;
• in response to receiving the data access request, using, by the server system, the organization hierarchy data to determine that the user is associated with a second unit of the tenant organization;
• accessing, by the server system, a portion of the policy data for the tenant organization that indicates a level of data access with which the second unit of the tenant organization is permitted to access data of the first unit of the tenant organization;
• identifying, by the server system, a subset of the data of the first unit of the tenant organization, wherein the subset is limited according to the accessed portion of the policy data;
• and
• providing, by the server system, a response to the data access request that is based on the identified subset of the data for the first unit of the tenant organization.