How we protect your health data
Health information deserves more care than a marketing badge. Here is exactly what we do.
Last updated 20 August 2026
Consent before anything is shared
A sponsor or research site sees your details only after you explicitly consent while applying to that specific study. Browsing trials, saving conditions or enabling alerts shares nothing with anyone.
Access is enforced in the database
Every table storing personal data has row-level access rules. Patients can read and write only their own rows; a sponsor can read applications only for trials they own; administrative access is limited to a separate role that is granted explicitly, never inferred from the browser.
Encryption and transport
All traffic runs over HTTPS/TLS. Data at rest is encrypted by our hosting provider. Payment card details are handled entirely by our payment processor — they never reach our servers.
Data minimisation
We ask for the minimum needed to match you: condition, age, location and contact preference. We do not request medical records, national health numbers or identity documents.
You stay in control
- Turn trial alerts off at any time from your dashboard.
- Edit or clear your matching preferences whenever you want.
- Request export or deletion of your data by emailing nictsoukalas24@gmail.com.
Reporting a vulnerability
If you believe you have found a security issue, email nictsoukalas24@gmail.com with steps to reproduce. Please do not access data belonging to other users while testing. We acknowledge reports within three working days.
What we do not claim
TrialBridge is an early-stage platform. We do not currently hold an external certification such as ISO 27001 or a SOC 2 report, and we say so plainly rather than implying otherwise. We will publish audit status here when that changes.