Ethics · GDPR · regulatory · CoI
Governance
Notes on ethics, data, regulatory posture, declared conflicts of interest, and security disclosure for the research group's programmes.
Ethics & IRB
All three programmes are approved under an umbrella protocol at 424 GMH (Επιστημονικό Συμβούλιο 424 ΓΣΝΕ; Υπ' Αριθμ. 25/10 Απρ 2025/424ΓΣΝΕ/ΔΤΕΕΟΕ, 10 April 2025). IRB references per programme: 424 GMH IRB · Αριθμ. Πρωτ. 43773 — ThyroidSupport (pregnancy + preconception arms; pregnancy-arm registration Αριθμ. Πρωτ. 34889; usability-studies amendment Αριθμ. Πρωτ. 12757). 424 GMH IRB · Αριθμ. Πρωτ. 47266 — Clinical Diabetes AI. The canonical record is maintained by the PI and is available on request.
GDPR posture
The public site sets no cookies and stores nothing about individual visitors. Page views are counted with Cloudflare Web Analytics, which is cookie-free and reports only aggregate totals. The partner and cohort forms don't submit to a database — they open a pre-filled email in the visitor's own client, which reaches info@pyruvate-dev.gr as ordinary correspondence. No medical data is ever submitted via this site. For research-context data (the clinical studies themselves), study-specific data-protection impact assessments (DPIAs) accompany each protocol.
Data residency
Primary research data is held inside the EU. The decision-support pipelines run against either local clinic systems or EU-resident managed databases. There is no transfer of identifiable data to non-EU processors.
Regulatory pathway
Today these are research instruments, not regulated medical devices. If we move toward conformity assessment, we'll publish a regulatory plan at that point. This site does not claim a regulatory status it does not hold.
Declared conflicts of interest
The PI maintains a private endocrinology practice (toulis.gr). Today the work is unfunded externally. No commercial sponsorship from device or pharmaceutical companies has been accepted. A full CoI statement accompanies each peer-reviewed publication.
Security & vulnerability disclosure
Security reports may be sent to info@pyruvate-dev.gr with subject 'security'. We aim to acknowledge within 72 hours. Researchers acting in good faith will not be subject to legal action for testing this site within the bounds of common professional ethics.