Trust
Security.
How we protect your account and data in our hosted products. We describe what we actually do — nothing more.
Draft pending review. This page is being reviewed by the Northline admins. Items in [brackets] are still to be confirmed.
Access and authentication
- Passwords are stored hashed — we never store or see your password.
- Sessions use secure, HTTP-only cookies with a limited lifetime.
- Role-based access separates customers, partners, support and administrators; the admin console is limited to invited administrators.
- Accounts can be suspended immediately if misuse is suspected.
Data protection
- All traffic to our websites and APIs uses HTTPS.
- Our hosting providers encrypt data in transit and at rest as part of their managed services. [Admin to confirm provider settings.]
- We do not store card numbers; payments are handled by a payment provider.
- Customer data is used only to provide the service, as described in our Privacy Policy and Data Processing Addendum.
Application security
- Rate limiting on public forms and sign-in endpoints.
- Signed, expiring links for downloads and account set-up.
- Money- and account-affecting administrative actions are written to an audit log.
- Dependencies are pinned and reviewed when we update them.
Availability and recovery
- Hosted on managed infrastructure with automated deployments.
- Database backups are provided by our database host. [Admin to confirm backup frequency and retention.]
- We aim to meet the availability target in our Service Level Agreement.
Your data, your control
- Export your data on request or from your account.
- Delete or close your account; data is removed after the retention period in our terms.
- A list of subprocessors is public, and we give notice before changing it.
Found a vulnerability? Email hello@northlinestudio.dev. Legal documents, including the Data Processing Addendum and subprocessors, are in the trust center.
Questions from your security team?
We'll answer your questionnaire and walk you through how the service works.