Trust, Security & Data Residency

Data Residency

Canadian client data is stored in Google Cloud’s Canadian region (northamerica-northeast1, Montréal). US client data is stored in Google Cloud’s US regions. Where Canadian AI endpoints are available, Canadian client analysis is routed through those endpoints.

Infrastructure

Northline operates on Google Cloud Platform. Google Cloud holds SOC 2 Type II, ISO 27001, HIPAA, and FedRAMP certifications.

Artificial Intelligence

Enterprise-grade AI providers are contractually restricted from using client content for model training. Every finding passes multi-layer verification before consultant review.

Encryption and Access Control

TLS 1.2 or higher in transit; AES-256 at rest. Role-based access (SuperAdmin, Consultant, Client Admin, Client User). Access is logged and reviewed periodically.

Compliance

PIPEDA compliant. SOC 2 Type II attestation pursued in line with enterprise client expectations.