Integrated COA support for CNS Clinical Trials, from preparation to administration

VeriBrain provides end-to-end support for setting up and running CNS Clinical Studies

  • For Sponsor/CROCOA Licensing, Rater Training, Central Rating, and Quality Review
  • For SiteSite Rating through qualified, deployed Raters, with Rater management

Common questions from Sponsors and CROs

Sponsor/CRO: Do we need a license agreement for this Assessment?

VeriBrain: We advise on the Assessment and help you secure the license.

Sponsor/CRO: How do we see where each Rater is in training?

VeriBrain: Through our LMS, we share training progress and issue certificates to Raters who meet the completion requirements.

Sponsor/CRO: How do we know Raters follow the standard guidelines when administering Assessments?

VeriBrain: We monitor standardized administration through Quality Review.

VeriBrain is a hub for licensing advice and permissions on the Clinical Outcome Assessments (COAs) that Clinical Trials use to measure efficacy

Years of Clinical Research work have built our network with major Copyright Holders in Korea and abroad. Through it, we help Sponsors and CROs obtain COA licenses efficiently

Copyright holder
VeriBrain
Sponsor/CRO
Sponsor/CRO to VeriBrain: Which version of the Assessment should we use?
VeriBrain to Sponsor/CRO: We review the options with you, agree on the right version for your study, and request the license from the Copyright Holder.
Sponsor/CRO to VeriBrain: Does this Assessment require a license agreement?
VeriBrain to Sponsor/CRO: Assessment A has no license fee. Assessment B requires a license agreement, and we confirm the trial details it calls for.
Sponsor/CRO to VeriBrain: How do we obtain officially translated Assessment forms?
VeriBrain to Sponsor/CRO: We check with the Copyright Holder and, if needed, run translation and linguistic validation to global Clinical Research standards.

*License terms vary by instrument, Copyright Holder, study, and contract scope.

Scales Supported for Licensing

Alzheimer's Disease / Dementia
ADAS-Cog, MMSE, MoCA, TMT, COWAT/MAE COWA, Stroop Test, CDR, ADCS-CGIC, CIBIS/CIBIC-Plus, AQS, ADCS-ADL, A-IADL-Q, NPI, QoL-AD
Depression & Mood Disorder
MADRS, GRID-HAMD, YMRS
Schizophrenia
PANSS
Movement Disorder
MDS-UPDRS, COMPASS-31, PSP-RS
Global
MINI, SDS, EQ-5D-5L, ZBI, RUD
Safety
C-SSRS, BARS, SAS

Can't find the scale you need? Contact VeriBrain and we will check the licensing details for you.

Check Licensing

These are selected examples of scales for which VeriBrain has supported license permissions. They do not mean that VeriBrain holds the licenses or supplies them exclusively. License terms and scope follow each rights holder's own policies.

Our Learning Management System trains Raters for standardized Assessment administration

In our web-based Rater Training Room, built for regulated settings, Raters learn to administer and score each Assessment. We evaluate their performance and issue Rater Certification

  • CNS trials depend heavily on Raters. Even when Raters administer the same Assessment, results can differ depending on each Rater's qualifications and training
  • Designed with ALCOA+ principles, the ICH E6(R3) guideline and Korea's MFDS regulations in mind, the VeriBrain LMS keeps reliable training records, including an Audit Trail

Training process

  1. 1Plan training
  2. 2Activate accounts
  3. 3Complete training
  4. 4Verify completion
  5. 5Issue certificates

*All training records are retained according to regulatory requirements and prior agreement.

A Rater Training environment built for global Clinical Research regulations

  1. Strictly limited accessWe create accounts only for Raters agreed in advance with the Sponsor. Each Rater can open only the Assessment Training assigned to them, under set procedures and rules
    VeriBrain Learning Management System rater sign-in screen. Over a photo of a hand writing on an assessment form, the text reads Standardized Rater Training for Clinical Studies, with an email field, a Next button, and the note Authorized Users Only.
  2. Real-time Rater Training statusBefore Assessments begin, external study staff can also check Rater Training completion for their study, site by site
    Sponsor/CRO view of rater progress for Demo Site A. Each rater has progress bars by module, a Completed status, and a completion date, with search, filters, and a CSV Export button.

We deploy Raters qualified to the standards of major Clinical Trials

  • A managed pool of Central and Site Raters qualified to administer Clinical Research AssessmentsWe check degrees, licenses, and experience against global Clinical Research expectations to keep Rater Quality consistent
  • Practical guidance for Raters, based on global Clinical Research experienceWe support deployed Raters with required documents, Assessment scheduling, and query resolution
Recording card in the recorder app. The ADAS-Cog recording shows Server received, a note that it cannot be edited or deleted, a waveform and a replay link, with a Signed button below.

Quality Review for Data Reliability

We run remote Quality Review on mobile devices to monitor how Assessments are administered. It keeps Rater administration standardized and helps catch Human Error.

We are the only official importer and distributor of ADAS-Cog in Korea

We hold an exclusive distribution agreement for the ADAS-Cog Kit in Korea with ADAS KITS, the distributor of ADAS-Cog, the gold standard Assessment in Alzheimer's disease Clinical Research.

A black ADAScog bag with a VeriBrain label and the test materials in front of it: a wooden bed model, funnel, blindfold, stethoscope, wristwatch, scissors, whistle, flower, pencil, and comb.

With approval from the original Copyright Holder and the rights holder, ADAS KITS, VeriBrain officially imports and supplies the test materials and forms

Contact

The inquiry form appears when JavaScript is enabled. You can also reach us by email at support@veribrain.com or by phone at +82-2-393-1770.

We received your inquiry

We will reply to this email address

Reference number
Reply to
the email you entered

Privacy Policy

Effective date: October 11, 2026
Last revised: October 11, 2026

This English version is provided for convenience. In case of any discrepancy, the Korean version prevails.

VeriBrain Inc. (the "Company") establishes and discloses this Privacy Policy under Article 30 of the Korean Personal Information Protection Act ("PIPA") to protect the personal information of data subjects and to handle related complaints promptly and smoothly.

Article 1. Purposes of processing personal information

The Company processes personal information for the following purposes. Personal information will not be used for any other purpose. If a purpose changes, the Company will take the necessary steps, such as obtaining separate consent under Article 18 of PIPA.

Receiving and answering website inquiries The Company receives inquiries sent through the website inquiry form and replies to them.

Preventing misuse of the inquiry form The Company limits repeated inquiries sent from the same IP address or email address within a short time.

Blocking attacks with a web application firewall The Company inspects website request information to block attacks on the website and excessive requests.

Article 2. Personal information we process

The Company processes the following personal information.

Required items

  • Name: receiving and answering website inquiries
  • Organization: receiving and answering website inquiries
  • Email: receiving and answering website inquiries; preventing misuse of the inquiry form
  • Inquiry message: receiving and answering website inquiries

Optional items

  • Phone number: receiving and answering website inquiries

Information recorded with an inquiry

  • Inquiry number, time received, language, and whether consent to collection and use was given (stored in the inquiry email): receiving and answering website inquiries

Collection method

Website inquiry form

Items generated or collected automatically

  • The IP address from which the inquiry form is sent: preventing misuse of the inquiry form
  • The IP address and request information (including request headers) when the website is accessed: blocking attacks with a web application firewall

The email address sent with an inquiry is kept as entered in the Company's mailbox so that the Company can reply. For the request-count records used to prevent misuse, the IP address and email address are not stored as entered; only values converted with a secret key are stored.

The Company does not use cookies or analytics tools.

Article 3. Processing and retention periods

The Company processes and retains personal information within the retention period set by law or the period the data subject agreed to at the time of collection.

PurposeRetention periodLegal basis
Receiving and answering website inquiries (inquiry emails, including the information recorded with an inquiry)Until the end of the month in which 3 years have passed since the last reply (for inquiries not replied to, since the inquiry was received)Consent of the data subject
Preventing misuse of the inquiry form (IP address and email address converted with a secret key)Used for up to 24 hours, then expires; expired records are deleted automatically by the system (deletion may take a few more days)Legitimate interests (Article 15(1), item 6 of PIPA)
Blocking attacks with a web application firewall (IP address, request information)Only a sample of some requests is kept, for up to 3 hoursLegitimate interests (Article 15(1), item 6 of PIPA)

Article 4. Provision of personal information to third parties

The Company processes personal information only within the scope set out in Article 1 (Purposes of processing personal information). It provides personal information to third parties only in the cases allowed under Articles 17 and 18 of PIPA, such as with the data subject's consent or under a specific provision of law.

Article 5. Outsourcing of personal information processing

The Company outsources the following personal information processing to run its services smoothly.

ProcessorOutsourced work
Amazon Web Services Korea LLCWebsite operation, receiving inquiry form submissions and sending them by email, storing converted data for misuse prevention, operating the web application firewall
NAVER Cloud Corp.Receiving and storing inquiry emails through NAVER WORKS

Under Article 26 of PIPA, the Company has a prohibition on processing personal information for purposes other than the outsourced work, technical and administrative safeguards, restrictions on re-outsourcing, management and supervision of the processors, and liability such as compensation for damages set out in the processors' terms of service and data processing addenda, and supervises whether the processors handle personal information securely.

If the outsourced work or a processor changes, the Company will disclose it without delay through this Privacy Policy.

Inquiries are processed and stored in the AWS Seoul Region and in NAVER WORKS in Korea. While the website is delivered, data may pass through content delivery network (CDN) servers located outside Korea.

Article 6. Destruction procedure and method

When personal information is no longer needed, for example because the retention period has passed or the purpose has been achieved, the Company destroys it without delay.

Inquiry emails At the start of each month, the Data Protection Officer deletes the inquiry emails whose retention period ended in the previous month from the Company mailbox and the mailbox they are automatically forwarded to, and empties the trash.

Misuse prevention records Records of IP addresses and email addresses converted with a secret key are used for up to 24 hours and then expire. Expired records are deleted automatically by the system without human approval (deletion may take a few more days).

Article 7. Rights of data subjects and legal representatives, and how to exercise them

Data subjects may at any time ask the Company to give access to, correct, delete, or stop processing their personal information, or to transfer it. Requests may be made in writing, by email, or by fax under Article 41(1) of the Enforcement Decree of PIPA, and the Company will act on them without delay. For children under 14, a legal representative may exercise these rights on the child's behalf.

How to exercise your rights

Article 8. Automatic collection devices

The Company does not use cookies that store and retrieve usage information, and does not install analytics tools.

Article 9. Security measures

The Company takes the following measures to keep personal information secure.

  1. Minimal collection: the inquiry form takes only the items needed for a reply and checks the length and format of each.
  2. Protection in transit: the website and the inquiry form are served only over encrypted connections (HTTPS).
  3. Access control: the inquiry system blocks unauthenticated direct calls and handles public inquiry requests only through the website delivery path (CloudFront), and inquiry emails can be sent only to an address designated by the Company.
  4. Minimal stored data: for misuse prevention, only values of the IP address and email address converted with a separately stored secret key are recorded; these records do not contain the original values.
  5. Minimal processing records: the execution records of the inquiry processing function keep only the inquiry number or request ID, the result and the processing time, and contain no name, contact details, inquiry message or IP address. Their retention period is set to 90 days, after which deletion is handled by the processor (AWS).
  6. Intrusion prevention: the Company operates a web application firewall that blocks known malicious IP addresses, known attack patterns and excessive requests.
  7. Administrative measures: the Company has set up and carries out an internal management plan and runs regular self-inspections, and only the Data Protection Officer reads inquiry emails.
  8. Physical measures: the Company has no server room of its own; personal information is processed and stored only in the processors' data centers, where entry is controlled.

Article 10. Data Protection Officer and complaint handling

The Company has designated a Data Protection Officer who is responsible for all personal information processing and for handling data subjects' complaints and remedies related to it.

Data Protection Officer

The Company has no separate complaint handling department. The Data Protection Officer handles complaints.

Remedies for infringement of data subject rights

To seek a remedy for an infringement of personal information rights, data subjects may apply for dispute resolution or counseling to the Personal Information Dispute Mediation Committee, the Personal Information Infringement Report Center of the Korea Internet & Security Agency (KISA), and other agencies. The phone numbers below can be dialed within Korea without an area code.

Changes to this Privacy Policy

This Privacy Policy applies from its effective date. If content is added, deleted, or corrected because of changes in law or policy, the Company will post a notice on the Privacy Policy screen of the website at least 7 days before the change takes effect.

Revision history

  • October 11, 2026: first established

This Privacy Policy takes effect on October 11, 2026.