Trust Center

This Trust Center is the public diligence pack for InfoSec, privacy, and procurement. It covers EU hosting on OVHcloud Frankfurt, fail-closed redaction, optional AI (including Conversation Redact speech-to-text), Outbound Guard telemetry, Prompt Guard, identity (Clerk), self-serve payments (Stripe), and how to execute the DPA.

For Enterprise evaluations, invoice licensing, or SSO onboarding, contact sales@northdocs.com · legal@northdocs.com.

Northdocs is EU-first SaaS with published controls. For procurement, here is the current status on common diligence items:

• SOC 2 / ISO 27001: on the roadmap. Ask legal@northdocs.com for the latest status letter.
• Production AI uses OVHcloud AI Endpoints in the EU (NER, Magic, summaries, Prompt Guard names, Outbound Guard names, and Conversation Redact speech-to-text). Organization admins can disable AI / ML detection under Settings so document content is not sent to an AI provider. Audio without captions then needs a WebVTT or SubRip sidecar. Questions: support@northdocs.com.
• Uptime SLA: quantitative commitments are available on Enterprise by written agreement. A public status page is forthcoming. Incident notices for affected customers go through support and email.
• Data residency: Germany / EU by default (OVHcloud Frankfurt, data region eu-de). US residency is not offered.
• Identity: Enterprise SSO/SAML is available. SCIM (join/move/leave) is offered via Clerk Directory Sync on Enterprise connections; ask sales to enable for your tenant.
• Payments: Stripe processes self-serve checkout and invoices. Northdocs does not store full card numbers. See Subprocessors.
• Encryption at rest: OVH S3-compatible object storage (Germany) by default. Enterprise can enable per-document envelope encryption and optional Azure Key Vault BYOK (customer CMK wraps the organization key; Northdocs never stores the CMK). At-rest object storage only; not in-memory processing. See Security Overview, Architecture, and the Security questionnaire.
• Outbound Guard telemetry stores mailbox, finding counts, destination class, and domains. It does not store message bodies or raw CPR.
• Resilience: automated daily database backups to EU object storage in the same region, with restores rehearsed on isolated infrastructure. Northdocs runs in a single EU region by design, so there is no cross-region failover that would move documents outside the agreed region. RTO and RPO targets are available on Enterprise by written agreement.
• Incident response: security and availability events are triaged on detection. For a personal data breach affecting customer personal data, Northdocs notifies affected customers without undue delay with the information needed for Article 33 and 34 obligations. The binding commitment is in the DPA; escalation goes to security@northdocs.com.
• Change control: production changes go through peer-reviewed pull requests with type checking and an automated test suite, including pinned regression tests for tenant isolation, fail-closed export, and outbound URL filtering. Physical and datacenter certifications are inherited from OVHcloud.

Standard Terms do not include a public quantitative uptime commitment. Enterprise customers can agree a written SLA in the Order Form / MSA.

A public status page is forthcoming. Incident notices for affected customers go through support and email. The page will cover the app, OVHcloud AI Endpoints, Clerk, and the PDF/OCR container once it is live.