Clinical research system design for subjects, visits, data, and accountability

How to Design a Clinical Research System: Clarify Subjects, Visits, Data, and Accountability

Author: JVDS Design Studio Reading time: about 8 min

The greatest risk in a clinical research system is having every feature but no clear account of the facts. Why did a subject miss a visit? Who changed a data point? When did the investigator sign? Why was a query closed? Every answer must be reconstructable. The interface's first job is not to look professional, but to remove ambiguity from research processes, data accountability, and time.

The greatest risk in a clinical research system is having every feature but no clear account of the facts. Why did a subject miss a visit? Who changed a data point? When did the investigator sign? Why was a query closed? Every answer must be reconstructable. The interface's first job is not to look professional, but to remove ambiguity from research processes, data accountability, and time.

01 Model Relationships Before Drawing a Dashboard

Clinical projects typically include studies, sites, subjects, visits, forms, data points, queries, deviations, files, and people. These are not parallel menu items; they form a traceable chain. A product planned only as Home, List, Detail, and Settings will almost certainly be overturned by business rules later.

Start with an object model: a study contains sites; sites enroll subjects; subjects follow protocol-defined visits; visits generate forms and data; data may trigger queries, deviations, or safety events; and critical actions enter the audit trail. Once these relationships are defined, navigation, permissions, and page hierarchy have a sound basis.

Core ObjectQuestion It AnswersInterface Must Include
StudyWhich protocol and version?Protocol version, phase, countries/sites, key milestones
SiteWhich institution is responsible?Activation status, enrollment, data quality, staff authorization
SubjectWho is receiving which study activities?Screening, randomization, visits, discontinuation, withdrawal, privacy identifier
VisitWhen was it planned and what actually happened?Window, actual date, missing items, rescheduling, out-of-window reason
Data and formsWhich record supports the study conclusion?Source, state, edits, signature, freeze, and lock
Query/deviationWhat is inconsistent, and who resolves it?Originator, owner, evidence, dialogue history, and closure rationale

Visual explanation of visits as comparisons between planned time and actual facts, not calendar events

02 A Visit Is a Comparison of Planned Time and Actual Facts, Not a Calendar Event

Many systems turn visits into calendar cards showing only a date and completion status. That conceals the differences that matter: the planned window, actual date, missing items, retrospective entry time, subject-related reasons, and investigator judgment.

Show plan and reality together. Never let one Completed label cover every detail. Put out-of-window, missed, and early-termination exceptions beside the user's current task instead of burying them in reports.

ScenarioCommon Design ErrorMore Actionable Design
Visit not startedShows Pending onlyShow window opening, preparation items, unmet prerequisites
Visit occurred but data is incompleteStill marked In ProgressSeparate occurrence, form entry, verification, and signature states
Outside the windowRed label without actionShow deviation in days, reason-entry link, and next owner
Visit canceled/rescheduledOverwrites the original dateRetain original plan, reason, operator, and new date
Early terminationDisappears from future plansState the reason, required follow-up items, and impact on study status

03 Design the Data Lifecycle, Not Just Page States

Complete is rarely the end of clinical data. A record may move through draft, saved, awaiting verification, queried, corrected, signed, frozen, locked, and—under authorization—reopened. Each state allows different people to perform different actions.

If state is communicated only by color, users must guess whether they can edit, what an edit will change, and who must confirm it again. Place the available action, owner, and impact explanation beside the state.

Clinical-system usability does not mean making actions casual. It means making responsibility, evidence, and consequences clear at every step.

Visual explanation of query management as a closed collaboration loop, not a comment thread

04 Query Management Must Be a Closed Collaboration Loop, Not a Comment Thread

A data query is more than “please verify.” It must connect to a specific data point, trigger, originating role, owner, response evidence, data correction, and closure decision. Users should see the original value, revised value, and full exchange in one context rather than navigating across pages.

Use bulk queries cautiously. Teams can generate recurring questions in bulk, but must still confirm that each record is genuinely resolved before closure. A Close All action should not create superficial cleanliness.

  • Place the query entry point beside the data point to preserve context.
  • Clearly distinguish automated rule triggers from manual queries.
  • Responses should support files, linked edits, or a rationale for no change—not text alone.
  • The closer should see the full history, not only the latest reply.
  • Reopening must record a reason and notify the original assignee.

05 Permissions Must Resolve to Object, Action, and Data Scope

“CRA can view, CRC can edit, PI can sign” is only shorthand. Real permissions have at least three dimensions: which studies or sites a person can access, which actions they can perform on which objects, and in which states those actions are allowed.

Regulated contexts also require critical electronic records and signatures to be reliable, complete, and traceable. Hiding a button is not enough; teams must address backend authorization, signature meaning, audit trails, and export review.

RoleMain TasksCommon Design Failure
CRC/study coordinatorSubject and visit execution, data entryRepeated entry across systems; no visibility into incomplete preparation
PI/investigatorMedical judgment, confirmation, signatureSignature page offers only Agree, without change and exception summary
CRA/monitorSite monitoring, source-data verification, issue trackingDashboard shows completion rates but no risks or actions
Data managementRule checks, queries, freeze, and database lockQueries are separated from data changes, obscuring closure
Sponsor project teamCross-site progress, quality, and riskMany metrics but no path to site, subject, or owner
Audit/inspectionTraceability and process complianceExports lack context; audit trails are unreadable or unfilterable

Visual explanation of multicenter dashboards that answer what needs action today

06 A Multicenter Dashboard Should First Answer: What Needs Action Today?

Multicenter studies often become colorful command centers with enrollment curves, completion rates, and site rankings, yet still fail to tell a project manager which site to visit next, whom to contact, or what kind of issue to resolve.

Organize the home screen by risk and action: subject-safety items first, then out-of-window visits, missing critical data, long-open queries, signature backlogs, and site-activation blockers. Trends explain change; action lists move work forward.

PriorityTypical IssueDefault Action
P0 Subject safetyUnconfirmed serious adverse event, missing urgent follow-upNotify the owner immediately and escalate continuously
P1 Data integrityMissing critical endpoint, unauthorized post-signature editBlock subsequent lock and require explanation
P2 Protocol executionOut-of-window visit, undocumented deviationAssign task; record reason and corrective action
P3 Operational efficiencyRoutine query backlog, expiring filesEnter the recurring work queue

07 Walk Through Real Study Scenarios During Design Review

Do not show business owners only static screens. Choose at least one complete subject and rehearse screening, enrollment, visits, data entry, automated queries, manual responses, investigator signature, monitoring, and lock. Then deliberately introduce an out-of-window visit, an incorrect edit, staff departure, and site suspension to see whether the system preserves consistent facts.

Usability testing must measure more than task completion. Record whether errors are recoverable, users can explain the current state, critical operations leave sufficient evidence, and different roles see consistent information.

Frequently Asked Questions

Must one clinical research system include EDC, CTMS, eTMF, and a subject portal?

No. Define the primary system's responsibilities from the study type and existing system boundaries. Forcing every module into one product often increases permission, synchronization, and validation costs. With multiple systems, define the system of record, synchronization frequency, and conflict handling.

Is an audit trail simply a record of every operation?

No. It must show who changed which record, when, what changed before and after, and why. Critical users must not be able to alter it. The interface also needs filtering, linked context, and readable exports.

Can a clinical system reduce confirmation steps for usability?

It can remove meaningless repetition, but not required accountability. Combine context, summarize differences, and explain the meaning of a signature instead of turning high-risk actions into unprompted one-click completion.

What should a client provide first for research-system UI design?

At minimum: the study process, role inventory, key forms, state rules, exception scenarios, compliance requirements, and existing data sources. A page list without business rules cannot support an accurate design estimate.

ServiceView
UI/UX Design ServicesView service details
Project ConsultationContact JVDS
Design and Web Development ArticlesRead more related articles
Link copied

From Idea to Launch, We Build It Together

Building useful, scalable digital products around user experience

Tell Us About Your Project