Security

Your vision is yours. So is your data.

Northify reads sensitive things: client emails, team conversations, contracts. Here is exactly what we access, how we protect it and who stays in control.

How we protect your work.

01

Read-only by design

Northify reads from your tools to evaluate requests. It never posts, edits or deletes anything in Jira, GitHub, Slack or your inbox.

02

You choose what we see

You connect specific Jira projects, one repository, one channel, one mailbox. Northify cannot see anything you haven't connected.

03

Encrypted credentials

Access tokens and mailbox passwords are encrypted in our database and are never sent to the browser.

04

Roles and permissions

Every teammate has a role, and each role sees only what it should. Clients you invite see their own project, not your company.

05

A person makes every decision

Northify recommends. Nothing is assigned, reprioritised, escalated or rejected until someone on your team approves it.

06

A record of everything

Decisions and changes are logged, so you can always see who did what and when.

What Northify reads.

Source What we read What we never touch
JiraIssues, descriptions, types and attachments from the projects you mapOther projects; we make no changes in Jira
GitHubIssues and pull requests from the repository you connectYour source code contents; other repositories
SlackMessages in the one channel you invite the bot toDirect messages and every other channel
EmailMessages in the mailbox you connect, optionally limited to sender domains you chooseAny other mailbox; we send no email from your account
ContractsThe file you upload, used to draft your project's responsibilitiesNothing else; you review the draft before it's saved

How the AI handles your data.

To evaluate a request, Northify sends the request's text together with your project's vision, goals and responsibilities to an AI model and receives a verdict and a recommendation back. [Your data is not used to train AI models — confirm against each provider's current terms.] Every evaluation shows its reasoning in plain language, so you can always see why Northify reached a conclusion, and disagree with it.

Services we rely on.

Service Purpose Data involved
Anthropic (Claude)AI evaluation and recommendationsRequest text and project context
OpenAITurning text into searchable embeddingsRequest and project text
PineconeStoring embeddings for matching requests to goalsEmbeddings and short references
[HOSTING PROVIDER, REGION]Application and database hostingAll application data
[PAYMENT PROVIDER]Subscriptions and invoicesBilling details; we never store card numbers
[EMAIL SERVICE]Account and notification emailsName and email address
Security FAQ

Common questions.

{{ f.a }}

Still have questions?

We're happy to go through the details with you or your client.

Talk to us

Ready to find your north?

Set up your first project in minutes. Free to start, no credit card.

Start today for free