Privacy policy

Who we are

NorthThread provides bordereaux production and premium/commission reconciliation software for MGAs and Lloyd's coverholders.

Data we process on your behalf

Files you upload contain personal data of policyholders (such as insured names and addresses). For that data, you are the data controller and NorthThread is a data processor, acting only on your instructions under our Data Processing Agreement.

Data we control

We control account data about you and your team: names, email addresses, sign-in and audit records. We use it to operate the service, secure it, and bill for it, nothing else. We do not sell data.

Where data lives

Data is stored in managed PostgreSQL and object storage with encryption at rest, automated backups, and strict access controls. Insurance records are retained per regulatory requirements; account offboarding follows the schedule in the DPA.

AI processing

During one-time template setup we send column headers and a handful of masked, truncated sample values to an AI service to suggest column mappings. Policyholder names and personal details are masked before sending, and monthly processing involves no AI calls.

Your rights

Account owners can export their data self-serve at any time and can request account deletion, which follows the offboarding process in the DPA. Contact us at ops@norththread.io.