Tool profile
CRIO: cost, fit and limits
CRIO is a clinical research software company, CRIO, Inc. of Boston, that sells eSource, eConsent, a site CTMS and eRegulatory tools for research sites. Its AI eSource Builder is listed on the home page, and clients can pick a regional sign-in for the United States, Canada, Australia or the European Union.
What to know first
CRIO is built around the research site: electronic source documents, consent, visit tracking and regulatory binders in one record. The home page lists an AI eSource Builder and a webinar on how one site verified AI, but gives no detail on what the tool does. The security page lists hosting in the US, Canada, Germany and Australia and SOC 2 and ISO 27001 certified data centers. No prices are shown.
CRIO at a glance
| Maker | CRIO, Inc., United States |
|---|---|
| Free plan | No |
| Entry price | Quote only |
| API access | Yes |
| Category | Best AI Clinical Trial Software in 2026, rank 9 of 11 |
| Website | clinicalresearch.io |
Who CRIO is best for
Research sites
eSource, a site CTMS and eRegulatory share one record, which reduces the paper and duplicate entry that site coordinators carry between studies.
Sites in regulated regions
Clients can host data in their own region so it does not cross national or regional boundaries, with servers in the US, Canada, Germany and Australia.
Sites that value inspection readiness
The home page lists EU Annex 11, GCP and 21 CFR-related badges, and the security page offers draft SOPs and validation exercises.
CRIO plans and pricing
| Plan | Price | What it includes |
|---|---|---|
| eSource | Quote only | Central eSource system, site eSource and reporting for capturing source data electronically at the site. |
| eConsent and site CTMS | Quote only | Participant consent and a site CTMS for visits and tracking, sold with the eSource record. |
| eRegulatory | Quote only | Electronic regulatory binders for site documents. The pages show no pricing for it. Pricing is not shown on the pages we read, so request a separate line. |
| AI eSource Builder | Not itemized | Listed with eSource. The pages do not explain how it works or whether it is priced separately. |
Checked November 2026.
What CRIO does
- AI eSource Builder
- Listed next to the central eSource system and site eSource. The pages do not describe how it builds templates, so ask for a live demonstration.
- Regional sign-in
- The home page offers sign-in locations for the United States, Canada, Australia and the European Union, matching the regional servers on the security page. Clients can pick the region at sign-in.
- Pseudonymized encryption
- For GDPR, data is encrypted with 256-bit AES from collection devices to CRIO databases and held in pseudonymized form, according to the security page. This applies to data collected on devices and stored in the CRIO databases.
- Compliance support kit
- CRIO provides draft SOPs and validation exercises to help customers meet compliance duties, and security and continuity SOPs on request. Draft SOPs and validation exercises help sites that lack a quality department.
- Penetration tests
- Third-party penetration tests are stated on the security page, which a quality team can ask to read. A quality team can ask to read the latest report before a decision.
How CRIO handles your data
CRIO's security page lists servers in the US, Canada, Germany and Australia and lets clients keep data in their own region. Hosting data centers are described as SOC 2 and ISO 27001 certified, data is encrypted in transit and at rest with 256-bit AES, and third-party penetration tests are stated. The privacy policy names CRIO, Inc. at a Boston address, keeps data under a record retention policy and mentions transfers to countries without adequate protection with contractual safeguards. It does not name subprocessors or address AI training or AI data use.
Where CRIO falls short in practice
- AI is thinly described. The AI eSource Builder is a heading, not an explained feature. Without detail, a quality team cannot judge review steps or error handling. Ask for a live demonstration of the builder.
- Site focus. The products center on research sites. A sponsor needing monitoring visits across many sites, eTMF and EDC from one vendor will look at suites. Ask what sponsor-side oversight exists before you commit.
- No price. No pricing is on the home page, so budgeting needs a call. Budgeting needs a quote from sales, since neither the home page nor the security page shows a number for any module.
Works with
Alternatives to CRIO
CRIO: common questions
Where can CRIO host my data?
The security page lists servers in the US, Canada, Germany and Australia and says clients can host in their own region so data does not cross national or regional jurisdictions. Confirm the region and backup location in your order form.
What does CRIO's AI eSource Builder do?
The home page lists it with the eSource products but gives no description. A webinar scheduled for November 4, 2026 is titled around how one site verified AI. Ask for a demonstration and for the review step before you rely on it.
Does CRIO publish pricing?
No. The home page shows no price or plan, and testimonials mention cost without figures. Ask for a quote that separates eSource, eConsent, site CTMS and eRegulatory. Ask for quotes by study count and by number of sites, because those are usually what vendors use to size a site-focused product.
Which compliance claims does CRIO make?
The home page lists HIPAA, EU Annex 11, FDA, GDPR and GCP badges, and the security page cites support for 21 CFR Part 11, Annex 11, HIPAA and GDPR, with SOC 2 and ISO 27001 data centers. Ask for audit reports.
Is CRIO for sponsors or for sites?
The product list centers on sites: eSource, eConsent, a site CTMS and eRegulatory. A testimonial mentions a sponsor-side tool, but the pages emphasize site workflows, so sponsors should verify what sponsor features exist. Sponsors should verify what features exist on the sponsor side before they rely on it.