The FDA’s MyStudies platform enables organizations to quickly build and deploy studies that interact with participants through purpose-built apps on iOS and Android. MyStudies apps can be distributed to participants directly (for example, when collecting patient-reported outcomes in support of a traditional clinical trial), or made available through the App Store and Google Play (for large-scale open-enrollment studies).
This open-source repository contains all of the code necessary to run FDA MyStudies on the infrastructure of choice. Optional open-source deployment tools are included for semi-automated deployment to Google Cloud Platform (GCP). These tools stand up an FDA MyStudies implementation in 1 hour, and are designed with specific compliance guidelines in mind, making the end-to-end compliance journey easier for organizations.
Upon completing deployment, FDA MyStudies platform components will be available for use. A summary of these components is below.
Component | Intended users | Purpose |
Study Builder | Study designers | User interface for authoring and publishing studies with no software development |
Participant Manager | Study coordinators | User interface for coordinators to manage participant enrollment (not yet available) |
Mobile Apps | Study participants | iOS and Android apps that participants use to discover, enroll and interact with studies |
Response Datastore | Researchers & analysts
(back-end component) |
Collects and stores study activity responses for downstream analysis (no PII) |
Study Datastore | (back-end component) | Manages study configurations (e.g. questionnaire content and schedule) |
Participant Datastore | (back-end component) | Manages participant information and any PII (e.g. contact information, consent forms) |
Auth Server | (back-end component) | Manages account creation, login, logout, resource requests, etc. |
FDA MyStudies is a flexible framework that enables diverse use-cases across a range of organizations and industries.
Examples for how FDA MyStudies can be used include:
Sample industries | Example use-cases |
Pharma and medtech |
|
Payers, providers and public health |
|
Cross-industry |
|
This repository contains all code required to setup and run FDA MyStudies. This includes backend services, mobile applications, deployment tools and the necessary documentation.
There are high-level directories for quick-start guides (/documentation
) and deployment related files (/Terraform
and /kubernetes
).
The remaining high-level directories are each dedicated to an application component (for example /Android
and /iOS
contain code for the mobile applications, while /auth-server-ws
contains code for the Auth server).
Each high-level directory contains a readme, build / deployment instructions, dockerfile, cloudbuild config and deployment configuration files (as needed).
FDA MyStudies is designed so that all data stays within the deploying organization’s environment (unless that organization chooses to export their data). Identifiable data (if collected) is stored separately from study and response data to help organizations minimize access to that data.
The FDA MyStudies platform has been designed to support auditing requirements for compliance with 21 CFR Part 11, allowing the platform to be used for trials under Investigational New Drug (IND) oversight. If an organization chooses to run FDA MyStudies on Google Cloud, a variety of infrastructure options are available that support HIPAA and other compliance requirements. More information about compliance on Google Cloud and an up-to-date list of products covered under BAA can be found here.
In addition to the platform, the tools for deployment on GCP are designed to assist organizations in their end-to-end compliance journey. Although achieving compliance is the responsibility of the customer, these toolkits enable organizations to deploy FDA MyStudies in a way that will help meet compliance requirements; such as setting up audit logs for retaining data.
Google Cloud can support customer compliance with 21 CFR Part 11 regulations when using GCP services in a prescribed manner to handle related data and workloads. While Google has a cloud technology stack ready for many 21 CFR Part 11 compliant workloads, the ultimate compliance determination depends on configuration choices made by the customer.
While the overall goals, compliance principles and functionality are similar, this release introduces several changes from version 2019.10 of FDA MyStudies:
-
Architecture
- Migrated from a VM architecture to a modular container-based architecture
- Refactored Participant Datastore
- Migrated to permissive open-source dependencies
- Removed dependencies that require commercial licenses
- Simplified mobile app calls and moved some functionality server-side
- Improved alignment of responsibilities between components
- Adjusted data storage based on usage and security requirements (e.g. study and participant status storage and calls were moved to Response Datastore, enrollment generation logic was moved to Participant Datastore)
-
Security
- Improved the existing authentication in place (e.g. removed application secret from being transmitted in all calls, unified the process into a single auth server)
- Added HTTPs across codebase
- Usability
- Simplified screens within the Mobile Apps and Study Builder
- Updated text for clarity throughout Mobile Apps and Study Builder
- Removed hard-coded values to enable customization of the platform
- Improved code readability to support 3rd-party adoption
- Bug fixes
- Fixed minor stability and usability bugs throughout
Additional functionality will be added over time. Feature requests and bug reports should be submitted as Github Issues. All feedback is greatly appreciated.