Security and data protection at Northwind Trading Co.

Northwind Trading is a fictional company used to show what a VitroVault trust page looks like on the free tier. Everything below is illustrative.

We publish how we handle data so a buyer can answer their own security questions without sending us a spreadsheet.

Certifications

ISO/IEC 27001
Certificate valid to 01 Mar 2027

SOC 2 Type II
Certificate valid to 30 Nov 2026

Cyber Essentials
Certificate valid to 15 Jan 2027

These certification marks (ISO/IEC 27001, SOC 2, Cyber Essentials) are the property of their respective standards institutes and certifying organisations (ISO, AICPA, and the UK NCSC). They are reproduced here ONLY as an example of how certifications appear on a trust page, for a fictional company, and imply no certification of Northwind Trading Co. or any real organisation.

Documents

Public

Information Security Policy (sample) v1·Published 02 Sep 2026 Public

Private

Data Processing Addendum (sample) v1·Published 02 Sep 2026 Private

Subprocessors

Northwind Trading Co. has not published a subprocessor list yet.