EvidenceTrust

Client

Parker Industries

248 employees

Plan

Sentinel

Request guided setup

Trust dashboard

What auditors and procurement will see when they ask about your workspace.

You're viewing sample data. This is a live demo workspace pre-seeded with realistic incidents, tools, and policies.

See pricing Guided setup

Data Handling Summary

Here is what your auditor will see. Original prompt text never leaves the user's device; the browser classifier runs in-page and only metadata reaches Northbeams. Browser incidents are kept for one year, MCP and LLM events for 180 days, and the signed audit log for seven years, all enforced by Firestore TTL. Six sub-processors handle data, the largest being Google Cloud for storage and Vercel for hosting, none of them outside the US or EU. The audit log is an append-only SHA-256 hash chain, so any tampering is detectable. You can export or delete the whole workspace from this page.

Compliance frameworks

Ready-to-share readiness checklists and signed Evidence Packs for every framework. These artifacts support procurement and audit review; they do not by themselves represent certification or SOC 2 report issuance.

Compliance home →ISO 42001 EU AI Act NIST AI RMF SOC 2

Retention policy

Northbeams enforces per-event-type retention via Firestore TTL. Defaults are conservative; the workspace owner can extend up to 7 years per event type.

Browser incidents365 days

MCP gateway events180 days

LLM API events180 days

Policy audit log2555 days

Manage retention →

Sub-processors

Northbeams processes workspace data through the following sub-processors. See the always-current list at northbeams.com/sub-processors.

Google Cloud (Firebase / Firestore)Primary data store + auth · us-central1

VercelWeb application hosting + edge · global edge

StripeBilling + subscription management · US/EU

ResendTransactional email · US

SentryError monitoring + tracing · US/EU

AWS BedrockOCR for upload findings (optional) · us-west-2

Integrity

Event audit log uses a per-org append-only SHA-256 hash chain. Evidence Packs are signed (HMAC-SHA256) and verifiable at /trust/verify.

Your data

Download a signed JSON bundle of every record we hold for your workspace, or schedule a permanent delete.