Authenticated access
Administrative areas require sign-in. Sessions are managed by our authentication provider, and passwords are never stored by the application itself.
Products
Security and data protection.
This page is maintained by Thornbridge Solutions to answer common security and privacy questions about our platform. It describes the controls we operate today, it is not a certification or an independent audit.
Controls in place
Role-based permissions
Roles are held separately from user profiles and checked on the server for every privileged read or write, so permissions cannot be changed from the browser.
Row-level database rules
Database access rules restrict each record to the roles entitled to see it, rather than relying on the interface to hide data.
Encryption in transit
All traffic between the browser and our hosting platform is served over HTTPS/TLS.
Audit logging
Demo-request activity is recorded with timestamps, outcomes and error detail so administrators can review what happened and when.
Configurable retention
Audit logs are purged automatically on a schedule, using a retention window administrators can change or disable.
Shared responsibility
Security is split between three parties. Our hosting and platform providers operate the underlying infrastructure. Thornbridge is responsible for how the application is built, how access is granted and how data is retained. Customers are responsible for who they invite, the roles they assign and the accuracy of the records they enter.
Data we hold
The platform holds workforce, compliance and care records entered by customers, plus enquiry details submitted through our demo request form. Data is processed to deliver the service and is not sold or used for advertising.
Certifications
We do not claim any certification we have not completed. If you need formal assurance documentation for a procurement process, contact us and we will tell you exactly what we can evidence today.
Reporting a vulnerability
If you believe you have found a security issue, email support@thornbridgesolutions.com with steps to reproduce. Please do not test against live customer data or publish details before we have responded.