1. Who this code applies to
This code applies to everyone working on behalf of NorthBridge: directors, employees, contracted professionals and partners while acting within our engagement. We discuss it where needed at the start of a relationship and expect decisions to reflect it.
The code does not replace law, contract, professional duties or security arrangements. Where a stricter rule applies, we follow it. If the right course is uncertain, we make the judgement visible and seek advice in good time.
2. Acting with integrity and independence
We conduct business honestly and without improper influence. Bribery, facilitation payments, hidden commissions and misleading information have no place at NorthBridge. A gift or invitation must never be intended to influence a decision and must remain proportionate, explainable and defensible.
We disclose an actual or potential conflict of interest before it can affect our judgement or the client’s decision. We then agree a practical safeguard, such as transparency, a different allocation of responsibilities or independent review.
3. Client interests with clear boundaries
We start with the organisation’s question. Our advice should fit its operations, risks, people, budget and existing environment. We make assumptions, dependencies, costs and genuine choices as clear as possible.
We do not promise more than we can support with evidence. Scope, accountability and exceptions are recorded. Where a request falls outside our competence or engagement, we say so and involve a specialist where that adds value.
4. Confidentiality, privacy and security
We handle client information, personal data, credentials and technical findings with care. Information is used only for the agreed purpose, access is limited and no more is shared than necessary. Confidentiality remains important after an engagement ends.
We report a vulnerability or incident through an appropriate secure route to the responsible party. We do not disclose sensitive detail without authority or turn security research into a contest. If something goes wrong, we act promptly, limit the effect and inform the right people.
5. Professional competence and evidence
We work within our current knowledge and experience. We distinguish facts, assumptions, supplier information and our own professional judgement. Sources and product claims are checked where relevant; an unknown is not presented as certainty.
We involve partners because their expertise adds value. Their role and the boundary of our own accountability are explained. We refer to a certificate, audit or test only where it demonstrably exists and applies to the scope described.
6. Responsible use of AI
Generative AI can support research, analysis and preparation. In our way of working, AI output never stands alone as evidence or a decision. A named person reviews the content, evidence, risk and fitness for purpose.
We do not enter confidential or personal data into an AI service without a suitable legal basis, arrangements and security. The client retains decision-making authority; NorthBridge makes operational decisions only within an explicit mandate.
7. Respect and safe collaboration
We treat people fairly and professionally. Discrimination, harassment, bullying, aggression and unwanted conduct are not acceptable. Differences of opinion may be discussed robustly, but never at the expense of respect or safety.
We listen, make expectations clear and leave room for people to raise a concern or mistake. Human rights and fair working conditions inform our own choices and relationships where we can reasonably exercise influence.
8. Proportionate and sustainable choices
Where relevant, our advice considers energy use, capacity, travel, hardware lifecycle and partner choices. We keep this proportionate: no sustainability claim without evidence and no measure that works only on paper.
Our decarbonisation roadmap and PCF statement provide the current framework. Progress and measurement are reviewed annually; an ambition is not presented as an achieved result.
9. Law, contracts and professional standards
We follow applicable law, contractual commitments and relevant professional standards. We do not use client data, intellectual property, software or licences beyond the rights agreed.
An engagement may bring several duties and responsibilities together. We therefore record who decides, who delivers, who reviews and when a decision needs to be reconsidered.
10. Raising and addressing concerns
Anyone who observes potentially improper conduct may report it confidentially through info@north-bridge.nl or directly to a NorthBridge director. A concern is handled seriously, carefully and as discreetly as possible. We do not accept retaliation against someone who raises a concern in good faith.
We decide who should review the matter, what action is needed and how feedback can be provided. Where independence is required, we involve an external adviser. The board owns this code and reviews it at least annually and after material changes.