Security

One sign-in, handled by a dedicated identity service

Every Bridge product signs you in through the same identity service, so there is one password to protect and one place to sign out: signing out of one product signs you out of all of them. This website never stores your password. Sessions expire on their own, and every page is served over HTTPS only.

Your data is kept apart from every other organization’s

Every organization’s records are separated by row-level security in the database itself, not only by application code, and each product checks what each person may see before it shows anything. Someone outside your organization cannot tell that a record of yours exists.

People see what their role allows

Your organization decides which products each person may open and what their role lets them do. Bridge AI and BridgeME support work under the same rules: Bridge AI answers as you and sees only what you could open yourself, and support explains how to do things without reading your organization’s records.

Backups

Databases are backed up every night, and each backup is restored to prove it can be.

What we do not do

• We do not sell personal data or share it for advertising.
• Error reports are set up to leave out what you type into forms.
• The phone app carries no analytics or advertising SDKs.

The privacy notice covers what we handle and why.

Reporting a vulnerability

Email support@bridgeme.cloud with what you found and how to reproduce it. Our security.txt lists the same contact. Please give us a reasonable time to fix an issue before you disclose it.