Security
Your data stays in the European Union, and stays yours.
How we protect the platform and how you can report a vulnerability to us.
Hosting in the EU
Servers in the European Union, encrypted daily backup.
Two-step
Two-step authentication for every user.
Fine-grained permissions
By role and by customer portfolio, with an audit log.
Separate companies
Each company's data is isolated from the others.
GDPR
Export and anonymisation of personal data on request.
AI in the EU
AI processing takes place in the European Union.
Report a vulnerability
Think you have found a security flaw? Write to contact@thulis.com before any public disclosure (see also security.txt). Please include:
- what you found and the possible impact;
- the steps to reproduce it;
- how we can contact you.
Scope
The Thulis website, application and API. Out of scope: denial of service, social engineering, spam, physical testing and any testing on third-party data.
Our commitment
- acknowledge receipt within a few working days;
- fix the issue promptly and keep you informed;
- agree with you on the timing of any publication;
- take no action against research carried out in good faith within this policy.
See Thulis with your own processes.
We show you the platform with examples from your line of business and answer your questions.