The Viedoc API is included at no additional cost with any study license. When you purchase a study license and gain access to our EDC system, you also receive the ability to manage API credentials. This includes generating client IDs and secrets and defining the scope of access for each client you create.

The Viedoc API is hosted within the same regional infrastructure as our Viedoc instances. Currently, we operate four instances: EU, US, Japan, and China – each with its own dedicated API instance. Data accessed via the API is stored in the same region as the corresponding Viedoc instance, following the same data residency policies as the data entered in Viedoc Clinic.

The Viedoc API uses OAuth 2.0 client credentials for authentication, enabling secure system-to-system communication. Each API client is assigned a set of scopes, which define the level of access and available functionality. For example, a client with the data export scope will have permission to export study data.

Additionally, each API client is linked to a specific study, ensuring that it can only operate within the scope of that study. This approach enhances security by enforcing strict access controls and limiting data exposure.

Our goal is to maintain 100% backward compatibility, ensuring that all API endpoints continue to function as expected across releases. This means that updates to the Viedoc API do not disrupt existing integrations.

However, in cases where a significant update is required, we have a fallback mechanism for versioning. Rather than modifying existing endpoints, we typically introduce new endpoints to provide enhanced functionality while preserving compatibility with previous versions.

The Viedoc API provides access to a range of study-related data and functionality. This includes the ability to push and export patient data, manage ePRO accounts, and handle site and user management, among other capabilities. The API is designed to support seamless integration with external systems while ensuring data security and compliance with regulatory requirements.

The Viedoc API is designed for high availability and scalability. It is load-balanced in the same way as other system endpoints to ensure optimal performance and reliability. Additionally, the API is protected by a Web Application Firewall (WAF), which helps mitigate threats and maintain secure, stable access.

Yes, the Viedoc API is available in a training environment in each region, just like the Viedoc EDC. This allows users to test and validate their integrations in a safe, non-production environment before deploying them to live studies. The training environment ensures that API functionality can be fully explored and refined without affecting real study data.

Viedoc provides comprehensive support and documentation for the API. Users can access detailed information through our eLearning platform and our Swagger API documentation, which outlines available endpoints, request structures, and responses.

For additional assistance, our Professional Services team is available to help with any questions or implementation challenges, ensuring a smooth integration process.

The Viedoc API follows the same rigorous development, QA, and validation processes as the rest of the Viedoc Clinical Suite, ensuring high standards of security, reliability, and regulatory compliance. Our development framework adheres to Good Clinical Practice (GCP) guidelines and complies with industry regulations, including GDPR, HIPAA, and ISO 27001, to ensure data protection, privacy, and integrity.