Trust Center
Featured Documents
Product Security
We pay great attention to enterprise features such as access control and single sign on. We are happy to provide more details about our enterprise features upon request.
Reports
We may provide security-related reports upon request.
Data Security
We follow industry best practices for data security. We are happy to provide more details about our data security practices upon request.
ESG
We prioritize and take environmental, social, and governance (ESG) considerations seriously in our operations and decision-making processes.
Legal
We take legal matters seriously and we always engage our legal counsel to review all commercial activities. Please contact us if you have any questions.
Data Privacy
Privacy of customer data is top of mind. We follow industry best practices and follow all applicable privacy regulations.
Access Control
Access is tightly monitored and controlled at our company. We are happy to provide more details about our access control practices upon request.
Infrastructure
We take great care to work with best-in-class infrastructure providers that provide secure computing and storage. We are happy to provide more details about our infrastructure upon request.
Endpoint Security
We follow industry best practices for endpoint security. We are happy to provide more details about our endpoint security practices upon request.
Network Security
We protect our corporate network against external & internal threats.
Corporate Security
We implement internal measures and practices to maintain a high standard of security.
Incident Response
We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
Risk Management
We have a dedicated team that manages security risks. We are happy to provide more details about our risk management practices upon request.
Asset Management
We have strict asset management policies in place to ensure that all assets are accounted for and secure.
Training
We provide security awareness training to all employees to ensure that they are aware of security best practices.
Physical & Environment
We have physical and environmental controls in place to ensure that our data centers are secure and reliable.
Continuous Monitoring
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.
Trust Center Updates
PHP Vulnerabilities
The Third Bridge position on the critical PHP vulnerabilities disclosed on 21 October 2026.
The UK National Cyber Security Centre (NCSC) has advised organisations to act on them immediately. The flaws could allow an attacker to run commands on a web server running PHP.
We treated this as a priority and have taken the following steps:
- We identified the systems in our environment that run PHP, starting with internet-facing services.
- Following identification we deployed an interim control at the web server layer that blocks the request type these attacks rely on. This substantially reduced our exposure, but is not a complete fix on its own, so we also added further protective rules at the web application firewall.
- We applied the PHP vendor’s security fix to our production systems and this has been implemented across all internet facing platforms today - 23rd October 2026.
If you have specific concerns about any service you use with us, or would like further detail, please let us know and we will respond promptly.