Security & Data Governance
Everything your Data Protection Officer needs to know.
UK Hosting
All data stored in UK data centres.
Encryption
Data encrypted at rest (AES-256) and in transit (TLS 1.3).
Role-Based Access Control
Fine-grained permissions. Therapists, managers, portal users - each sees only what they should.
Full Audit Trail
Every view, edit, and deletion is logged. You can always show who did what, when.
Two-Factor Authentication
TOTP, WebAuthn/passkeys supported.
SSO & LDAP
Enterprise single sign-on available on request.
Data Export
Export all your data at any time. CSV, JSON. No lock-in.
Data Retention & Deletion
Configurable retention policies. Secure deletion when required.
Responsible Disclosure
security@therapyplaza.co.uk for vulnerability reports.