NC
Northwind Capital
Trust Center
NC
FinTech

Northwind Capital

Underwriting copilots for regional lenders.

A+
Trust rating
As of 18 Jul 2026

Northwind Capital provides underwriting copilots for regional and community lenders, combining traditional credit data with alternative signals to speed up loan decisions without loosening risk standards. Northwind partners with over 60 community banks and credit unions across North America.

Certifications
3of 4
Uptime, 90d
99.99%
Subprocessors
3
Customer since
2023
AI Governance Posture
Guardrails active
11 of 11
Ethics & bias score
97
Violations blocked, 30d
302
Frameworks tracked
3
NIST AI RMF91%
OWASP LLM Top 1097%
AISCF84%

Guardrails, ethics & bias scoring, and framework coverage as of 18 Jul 2026 — the same snapshot Northwind Capital publishes above. Coverage is a self-assessment aid for audit preparation, not a certification.

Security Operations
Operational · 99.99% uptime over the last 90 days
Critical patch SLA
12h
Mean time to remediate
2.8h
Commits auto-reviewed
100%
Alerts resolved, 30d
63
Last incident: No incidents in the last 90 days — resolved

Patch SLAs, remediation time, and code review activity as of 18 Jul 2026 — the same snapshot Northwind Capital publishes above. In keeping with responsible disclosure, this page shows commitments and resolved history, not a live list of currently open vulnerabilities.

Compliance

SOC 2 Type II

Active · valid through 18 Jul 2027

ISO/IEC 27001

Active

PCI DSS

Active · valid through 30 Apr 2027

GDPR

In progress
Documents
SOC 2 Type II report
Updated 18 Jul 2026
PCI DSS attestation of compliance
Updated 30 Apr 2026
Penetration test summary
Updated 18 Jul 2026
Subprocessor list
Updated Live
PUBLIC
Subprocessors
Name
Purpose
Location
Microsoft Azure
Cloud infrastructure
United States
Azure OpenAI
Model inference
United States
Plaid
Account verification
United States
Security Q&A

Answers drawn from what Northwind Capital publishes above — a starting point for a vendor security review, not a substitute for the documents themselves.

Yes — request the SOC 2 Type II report under NDA in the Documents section above.