What survey or data collection software can I use for human subjects research?

Indiana University has strict policies (such as RCDM-01IU policy regarding the management of institutional data RC DM-01 and RCDM-02IU policy regarding disclosure of institutional information to third parties RC DM-02 ) that govern how institutional and research data must be handled, which means not all commercial or cloud-based tools are appropriate or permitted, especially for work involving human subjects, identifiable personal data, or regulated data (e.g., HIPAA, FERPA, GDPR-related information).

Some of the common platforms that are currently available for IU Researchers and may be appropriate for some types of research data collection: 

• RCREDCapSecure web platform for self-managed data collection RC REDCap (Research Electronic Data Capture)
• RCQualtricsInstructions for making Qualtrics account & appropriate uses for the platform RC Qualtrics  

IU strongly encourages the use of university-supported platforms that have undergone a thorough review for security, compliance, and integration with IU systems. For data collection, platforms like REDCap are recommended for sensitive data because they offer secure, IU-hosted environments that support RCHIPAA complianceHIPAA provides standards for protecting patient health information RC HIPAA compliance , audit trails, and flexible form creation. For qualitative analysis, researchers often inquire about tools like RCDedooseWeb-based application for organizing & analyzing research data RC Dedoose or RCNVivoQualitative data analysis software package RC NVivo for analysis purposes. These can be used in some cases, but researchers must ensure that their use complies with IU's third-party data processing policies, particularly if the tools are cloud-based or involve external data servers, or if the data is being shared across teams.

Before using any external service or tool, researchers should ensure it is appropriate for the security level required for their data. For assistance, consult with RCSecureMyResearchFree resources & consulting to help researchers protect data RC SecureMyResearch to determine whether a platform is approved. Using an unapproved tool for regulated data collection can violate university policy and funder requirements, and may put sensitive data at risk. If a tool is not on the pre-approved list, researchers may need to request a Third-Party Assessment before using it with institutional or sensitive data.

IU's goal is to provide researchers with the tools they need while also protecting the data, the university, and the individuals whose information is involved. To that end, early consultation with a RCData StewardData Stewards are responsible for the governance of each subject area RC Data Steward and/or SecureMyResearch is highly encouraged when planning to use any third-party software. Doing so can help avoid compliance issues and ensure that data workflows are secure, ethical, and institutionally supported.