Runs where you choose
Public cloud, private cloud, hybrid or your own servers. You decide where your system and its data live.
Security at thinkbridge.
thinkbridge is ISO 27001 certified. The systems we deliver are built to SOC 2 standards and run in the cloud or on the servers you choose.
Certifications and standards.
- ISO 27001 certifiedA copy of the certificate is available on request.
- Built to SOC 2 standardsWe design and build each client system to these standards.
- Healthcare dataSystems that handle protected health information (PHI) are built for HIPAA and PHI compliance. Your organization remains responsible for its HIPAA compliance program.
How every system is protected.
- Zero-trust access
- Encryption
- Backup and disaster recovery
- High availability
- Full audit trail
AI model calls
Every task goes to the AI model that handles it best, and every call is monitored.
Beta releases
You approve each change in a beta release before it goes live.
Bring your reviewers' questions to the people who build the systems.
One of our experts will take your reviewers through how a system like yours is secured.
Hosting and ownership.
You own what we build
At the end of the term you own the system outright, including the source code, the data model, the business logic and your data. Nothing reverts to thinkbridge.
What would a system you own cost?
Tell us what you run today, and we'll send a free breakdown of what replacing it would cost within five business days.
A word from our head of security
We check every system's security before anyone else has to. If something slips after go-live, you hear it from us first, with the fix. That's how I'd want my own company's data looked after.
Arun K.N., Associate Director, DevOps
Security questions, answered.
Is thinkbridge SOC 2 certified?
No. thinkbridge is ISO 27001 certified, and the systems it delivers are built to SOC 2 standards. We are in the last steps of getting our own SOC 2 Type II as well.
Is thinkbridge HIPAA compliant?
HIPAA has no certification. thinkbridge builds systems that are ready for HIPAA and PHI compliance, with encryption, zero-trust access, backups and a full audit trail, running in the client's own cloud or on its own servers. thinkbridge does not claim HIPAA compliance for itself. Each client remains responsible for its own compliance program and for how it configures and uses the system.
Who owns the system thinkbridge builds?
At the end of the term the client owns everything thinkbridge builds: the source code, the data model, the business logic and the data itself. Systems run on infrastructure the client chooses, with no proprietary runtime and no licensing fees, so there is no vendor lock-in.
Where do thinkbridge systems run?
Each system runs where the client chooses: public cloud (AWS, Microsoft Azure or Google Cloud), private cloud, hybrid or the client's own servers.
Can thinkbridge complete our security questionnaire?
Yes. Send it through the form on this page, and our team replies within five business days.
There's a new way there™.
One of our experts can show you how a system like yours would be built and secured.