Trust & Security
Security at Nordlight
Security is built into how we design, operate, and improve Nordlight. Here you can see how we protect data, reduce risk, and handle security concerns.
Our approach
We treat security as an ongoing discipline, not as a box-ticking exercise. Access is limited where possible, systems are reviewed continuously, and dependencies are kept up to date as part of normal engineering work.
As the platform matures, we continue to strengthen our controls and document them more explicitly for customers, partners, and regulators.
Protecting your data
We aim to collect only the information required to deliver the service, restrict access on a need-to-know basis, and handle personal data in line with applicable privacy and data-protection rules, including GDPR where relevant.
Responsible disclosure
If you believe you have found a vulnerability or a security issue, please contact us. We investigate credible reports promptly and treat responsible disclosure seriously. Get in touch →
We ask that you give us a reasonable opportunity to investigate and resolve the issue before any public disclosure, and that you do not access or modify data that is not your own.