Thorngate Consulting
Independent research into data governance and security in digital health infrastructure.
Who we are
Thorngate Consulting is an independent cybersecurity research practice. We hold no vendor, investor, or NHS affiliation — our work is not funded or directed by any company we examine.
Current focus
Our current focus is the distinction between data residency and data sovereignty in AI-assisted clinical imaging: specifically, whether hosting patient data within the UK is sufficient assurance when the processing organisation is foreign-owned and subject to foreign legal jurisdiction. This is an open question we are actively researching, not a conclusion we have already reached.
What we're not
We are not selling a product. We are not representing any AI vendor, cloud provider, or NHS body. If you work in information governance, data security, or clinical safety within the NHS and have a view on this question, we would welcome a conversation.