Security, stated plainly
Where data lives, how it is encrypted, who can access what, and what we are still working on. If you are a procurement or security reviewer, this is the page to read.
- Hosted on secure cloud servers
- HTTPS on every connection the apps make
- Access by role, scoped to each sale
- Messages, vet views and report sends on the record
- Daily backups, 35 days of point-in-time recovery
Who sees what
Access follows the role and the sale. Each person sees what their part in the sale needs, and nothing else.
- The sale catalogueAll of it: Every lot
- X-rays and scope on a lotAll of it: Every submission, to approve or deny
- Vet reportsNothing: Never
- Activity on the recordAll of it: Every message in the Comms log, every vet view in Statistics
| Sales company | Vet or clinic | Consignor | Report recipient | |
|---|---|---|---|---|
| The sale catalogue | All of it: Every lot | All of it: Every lot, signed in | All of it: Every lot, signed in | Nothing: No access |
| X-rays and scope on a lot | All of it: Every submission, to approve or deny | Only their own, or what they are given: Their own, and approved files in sales they can view | Only their own, or what they are given: The status of their own lots, never the images | Only their own, or what they are given: The images in the report sent to them |
| Vet reports | Nothing: Never | All of it: Their own, and they choose who gets one | Nothing: None in their login | Only their own, or what they are given: The copy sent to them, as it was sent |
| Activity on the record | All of it: Every message in the Comms log, every vet view in Statistics | Only their own, or what they are given: Their clinic's send history | Only their own, or what they are given: Vet views of their own lots, their activity feed, and an alert when a vet opens one | Nothing: None |
- All of it
- Only their own, or what they are given
- Nothing
A vet sees a sale's X-rays and scope only when its sales company gives them access, and nothing a vet submits is visible to anyone else until the sales company approves it.
Access per vet, per sale
The sales company decides which vets and clinics can see each sale, and changes it from one table.
- No access, View, or View and submitFor each vet and clinic, for one sale window or across every sale.
- Requests in one queueA vet asks for access to a sale, and the sales company approves or denies it.
- Client names stay with the clinicThe declare-client list shows only a clinic's own client names, and a clinic can switch the list off.
Where your data goes
From the device to storage, and what protects it at each step.
On your device
- On iPhone, iPad and Android, your sign-in is kept in the device's secure storage.
- The desktop app encrypts saved accounts with the operating system's own protection, with Touch ID on Mac and a shared-computer mode.
On the way
- The apps and the portal connect over HTTPS (TLS) only, and our web addresses send plain HTTP on to HTTPS.
- Large files and videos go straight to storage on an upload link that can write that one file and nothing else. Your sign-in is never sent to the storage service.
At rest
- The application, its database, and every X-ray, scope video and report PDF are held on our secure cloud servers.
- Every X-ray, scope video and report PDF is encrypted at rest with AES-256.
- The production database is backed up automatically every day, with point-in-time recovery, and 35 days of backups are kept.
This website
Runs on Cloudflare, apart from the product, so the status page still loads when the product does not.
See system statusLocal Server
Keeps an encrypted copy of each sale's approved X-rays and scope videos at the venue, never vets' reports, notes or shortlists, and clears it 7 days after the sale by default.
About the Local Server
Reports leave on their own link
Each recipient gets their own link, which expires and can be withdrawn.
- Sent once, never changedThe client gets a copy of exactly what was sent, with no login. Later edits change the vet's copy, never the client's.
- Every send on the recordEach send is kept in the clinic's send history, with delivery and link activity.
- Never through the sales companySales companies never see, review or distribute vet reports.
Messages, views and sends on the record
Who did what, and when, for the people responsible for the sale.
- Every messageEmail, SMS and push to vets and consignors, in the sale's Comms log, with CSV export.
- Every vet viewVet viewing by lot, by day and by week in Statistics, with CSV export.
- Your account, your callDelete your own account from Settings in the web portal, the desktop app or the phone app.
The questions procurement asks
Where is data physically stored?
On our secure cloud servers: the application, its database, and every X-ray, scope video and report PDF. If your organisation has specific data-residency requirements, talk to us before procurement and we will give you a straight answer about what we can support today.
How is data encrypted?
In transit, the apps and the portal connect over HTTPS (TLS) only, and our web addresses send plain HTTP on to HTTPS. At rest, X-rays, scope videos and report PDFs are encrypted with AES-256 on our secure cloud servers.
Who can access what?
Access is role-based and scoped to the sale a record belongs to. A vet at one clinic cannot see a horse submitted by another unless the sales company has given them access to that sale. Sales company administrators see only horses for sales they configure.
Is there an audit trail?
For what matters in a sale, yes. Sales companies see every message to vets and consignors in the Comms log and every vet view in Statistics, each with who and when. Clinics keep a send history for every report, and each account has its own activity feed.
What is the backup and disaster-recovery posture?
The production database is backed up automatically every day, with point-in-time recovery, and 35 days of backups are kept. Imaging media is stored on our secure cloud servers, which keep several copies of every file. If your procurement process needs specific recovery-time commitments, ask us. We would rather agree them with you directly than publish numbers here.
What do Local Servers store?
A Local Server keeps a copy of each sale's approved X-rays and scope videos at the venue, encrypted per sale, so they load over the local network. It never stores vets' reports, notes or shortlists, and clears each sale 7 days after it by default.
How do you handle GDPR and data-subject requests?
Personal data, meaning vet names, consignor contacts and audit-log identifiers, is treated as Article 4(1) personal data. For access, rectification or erasure requests, contact contact@thoroughvet.com.
What certifications do you hold?
The honest answer is none that we will claim on this page. We would rather publish nothing than publish a badge we do not deserve. If you need a specific certification before procurement signs, talk to us about timing.
How do I report a vulnerability?
Send reproduction steps and we will get it to the right people. We do not run a paid bug-bounty programme. Email contact@thoroughvet.com.
What happens during an incident?
We tell affected customers. Incidents during a sale come first, and our team is in the sale's WhatsApp group throughout.
Can I export my data?
Yes. You own your content, as our Terms and Conditions say. Statistics, sale results and the Comms log export to CSV, and a clinic can download each study and the original scope video.
Send us your security questionnaire
We would rather answer your reviewers' questions directly than have you guess from a page. Send the questionnaire over and we will complete it.
Contact us