Account & Security

Manage your profile and preferences, turn on two-factor authentication, review your trusted devices, get sign-in alerts, and exercise your data rights.

Your profile and preferences

Your account is where you manage who you are and how ClinicaLister behaves for you.

Profile — your name, contact details, company, and role.
Preferences — light or dark theme, your display language, your currency, and your number format.
Currency — the currency used to display every currency custom column across trials, drugs, devices, and diseases (US Dollar by default). Change it once and all currency fields update.
Number format — how numbers, currency, and enrollment counts read: 1,000.00 (comma thousands, dot decimal) or 1.000,00 (dot thousands, comma decimal).
Notifications — choose which emails you receive and how often, by category.

Two-factor authentication (2FA)

Two-factor authentication adds a second step at sign-in: after your password, you enter a 6-digit code from an authenticator app. It's optional for everyone and required for administrators.

1
Enable it
In Profile → Security, start the 2FA setup and scan the QR code with any standard authenticator app (for example Google Authenticator, 1Password, or Authy).
2
Save your recovery codes
When you enable 2FA you're given a set of one-time recovery codes. Store them somewhere safe — they let you get back in if you lose your authenticator. You can regenerate them at any time.
3
Sign in with a code
From then on, after your password you'll enter the current code from your app to finish signing in.

Tip: Lost your phone and your codes? A dedicated recovery page lets you regain access using a recovery code and set 2FA up again, without waiting on support.

Trusted devices

ClinicaLister remembers each device you sign in from across the platform, so you can see and control them in one place under Profile → Security.

See every device, with a friendly name and the approximate sign-in location.
Rename a device so it's easy to recognize.
Set how long a device can sit idle before it's signed out.
Revoke a device to sign it out everywhere immediately — useful if one is lost or unfamiliar.
Upgrade the device you're on to a hardware-bound mode for stronger protection against session theft.

If your account is accessed from a device ClinicaLister hasn't seen before, or from a new country, you get an email letting you know — with the device, the approximate location, and the time. If it wasn't you, the alert links straight to your trusted devices so you can revoke access and change your password.

Extra confirmation for sensitive actions

For high-impact actions — exporting all your data, deleting your account, or completing a paid change — ClinicaLister asks you to re-enter your password first, even though you're already signed in. This short re-confirmation protects you if someone gains brief access to a device you left open.

Your data and privacy

ClinicaLister gives you direct control over your personal data, in line with GDPR.

Export — download a complete copy of your personal data in a machine-readable file.
Delete — permanently remove your account and associated data.
Consent — review and change your consent choices, with a record of what you agreed to and when.

Note: Export and deletion ask you to re-confirm your password first. For the formal statements, see the Security and GDPR Compliance pages linked below.

Learn more

Security overview — /security
GDPR compliance — /gdpr-compliance
Privacy policy — /privacy-policy