Security and data handling

Short version: your data stays in your systems, and we build on fake data.

How we handle data

• We build on dummy or masked data. We do not need your real records to build or test.
• Production runs in your own cloud or tenant. Or, if you prefer, in our cloud in your region. You choose.
• Access is through accounts you control. You create them, you can see what they do in the logs, and you can revoke them at any time.
• Least access. We ask only for the permissions the job needs.
• A data processing agreement is available on request, before any real data is involved.
• We tell you about third parties. If a job uses an AI model service or a data provider, we name it before we start.

What we do not claim

Northkeel Labs holds no security certification or audit report. We do not claim SOC 2, ISO 27001 or similar. We describe how we work here, and you can hold us to it in the contract.

If something goes wrong

If we find or suspect a problem that affects your data, we tell you by email without delay and say what we know.

Questions

Email hello@northkeellabs.com. We will answer security questions before you buy.