Northbeam holds no copy of your product data. The architecture is the security control — everything below is the paperwork around it.
Achieved September 2025. Type II audit in progress, report expected Q3 2026.
EU data residency in eu-west-1. DPA available on the Scale tier.
TLS 1.3 on every connection, including the warehouse adapters.
AES-256 for everything we store, which is metadata and pulse definitions — not your product data.
Google, Okta and Azure AD on the Scale tier.
Northbeam never requests write access to your warehouse, and every query it compiles is logged in plain SQL.
[email protected], PGP key published. First response within 24 hours.
Rolling programme, €100 to €5,000 per validated finding, with public credit if you want it.
Scale customers are notified at least 30 days before a new sub-processor begins processing, with a contractual right to object.
Scale includes a SOC 2 report, a signed DPA and a review call with Lior.