Trust & security

    Your data is protected

    Every NorthOak specialist is vetted, contracted, and trained before touching your systems. Here's what we do to protect your business.

    NDAs & IP assignment

    Every specialist signs a comprehensive NDA and IP assignment agreement before their first day. All work product belongs to you, not NorthOak or the specialist.

    Scoped access

    Specialists receive only the access required for their role — no standing admin privileges. Access is provisioned on day one and revoked immediately if the engagement ends.

    Device & security policy

    Specialists work from managed or personal devices that meet our security baseline: up-to-date OS, endpoint protection, and no public WiFi for client work. We can accommodate stricter requirements on request.

    Dedicated, not shared

    Your data is handled by one specialist, not a shared pool. There's no ticket queue, no handoff to agents you haven't vetted. One person, fully accountable.

    How we handle your data

    Client data

    Data shared with your specialist stays within the tools you provision. We don't store client data in NorthOak-owned systems unless explicitly required for the engagement.

    Communications

    Work conversations happen in your communication tools (Slack, email, your PM system). Specialists do not use personal messaging apps for client work.

    Offboarding

    When an engagement ends, access is revoked the same day. Specialists are contractually required to delete any locally stored client data.

    Common questions