Security

Platform isolation

NorthSec AI uses per-tenant isolation: dedicated KMS keys, S3 prefixes, and IAM boundaries. Cross-tenant access is denied by default at the data plane.

Operations

• MFA for all staff and customer admin roles
• Immutable audit trail for privileged actions
• Vulnerability management on a defined cadence
• Backup encryption and restore drills

Responsible disclosure

Report vulnerabilities to [ciso_email]. We coordinate disclosure and provide safe harbor for good-faith research on in-scope nnsec.com assets.

Customer responsibilities

Customers maintain identity hygiene, patch cadence, and configuration of their cloud accounts. Shared responsibility is documented in the MSA.