Norcaster · Trust center
Due-diligence pack
Version 1. Every document included is listed below with its SHA-256; the pack's index lists them again.
In pack v1
Subprocessor list (version 2, effective 2026-10-13) PDF
SHA-256 1c4134ae560a3c37a802fa89523be4eb23d719bcbe6e5aa61a8ace6aa60b4591
Technical brief PDF
SHA-256 aa787ae49eee4c3be6c7de31a569e939d783fd1e142762bff5eb17ff1cbac66b
Check a file after unzipping with shasum -a 256 <file>. The ZIP itself: 9ba5aad95ba82be3afef8adc7992456c3e5b5f71ec2bbf47b88070cc724c014c.
Status
- SOC 2 Type II report: SOC 2 Type II preparation is underway; the observation window opens 1 November 2026 and the report follows fieldwork, expected Q2 2027, available under NDA. Norcaster did not pursue a Type I. More
- ISO/IEC 27001 and ISO/IEC 42001: Norcaster's own ISO/IEC 27001 and ISO/IEC 42001 programmes have started and are ongoing, run as one management system. More
Not in this pack
- Standard Data Processing Agreement (template): Not included in this version.
- DORA runtime evidence brief: Not included in this version.
- Model provenance questionnaire answers: Not included in this version.
- Security brief: Not included in this version.
- DORA supplier data sheet: Not included in this version.
- DORA ICT services addendum: Not included in this version.
- Cyber Resilience Act position: Not included in this version.
- Continuity statement: Not included in this version.
- Penetration test summary: Not available.
- Insurance certificate: Not available.