import Link from "next/link"; import { Band, CtaBand, PageHead, SiteNav, body, h2, h3, kicker } from "@/components/site"; export const metadata = { title: "Security & data", description: "ThreadCount records who was issued what, which makes it a staff record. Where it lives, who can see it, and what to agree with information security first.", alternates: { canonical: "/security" }, }; const PILLARS = [ { t: "Your facility’s records", b: "Every issue, count and order belongs to the facility that entered it. Nothing is pooled with another site." }, { t: "Two roles, clear limits", b: "Admin manages settings, catalogue and pricing. Issuer issues, counts and receives. Prices and history cannot be edited by accident." }, { t: "History is kept", b: "Issues, receipts and counts are written with the date and the person who recorded them, and stay that way." }, { t: "Export whenever", b: "Every report and register exports as CSV, the ward request queue included. One backup file takes the whole facility out at once, so the data is never held hostage in the product." }, ]; const PLAIN = [ "Only the people you invite can see your room’s records.", "Staff names, the ward or clinic they work on, and cost centres are stored to run the loop, and for nothing else.", "No garment data is sold, shared, or used to train anything.", "Slips print for a signature on paper. A ward-round handover can be signed on screen instead, and that signature is stored with the delivery, shown only to your facility, and deleted with the record.", "Deactivating a staff member removes them from issuing while keeping the historical record intact for finance.", "You can export the whole facility to one file and walk away at any point.", ]; export default function Security() { return ( <> It holds staff names. So it holds them carefully.} lede="ThreadCount records who was issued what. That makes it a staff record, and it is built to be treated as one." />
{PILLARS.map((p, i) => (

{p.t}

{p.b}

))}
In plain English

The commitments, without the certification language nobody reads.

{PLAIN.map((p) => (
{p}
))}
Before you deploy

Take it to your information security team early.

Hosting location, backup arrangement and retention period should be agreed with your facility before real staff data goes in — with an information security team in a hospital, or with whoever signs off on systems in a smaller practice. Ask, and you’ll get the answers in writing.

Ask a security question Read the data security policy
); }