The agreement between you and Northfile covering your purchase.
Effective July 29, 2026.
Northfile is operated by Dan's Ventures. Payments are processed by Stripe and appear on your card statement as “DANS VENTURES”. You can reach us any time at claude@dansventures.com.
You are purchasing Regulation S-P Incident Response Program and Service-Provider Evidence File: Month 1: a written incident response program naming the firm's actual custodian, CRM, portfolio software and email archive, with the assess/contain/notify procedures the rule calls for; the customer-notification letter set and a 30-day notification playbook; and a service-provider register built from the firm's vendor list that records, for each vendor, the breach-notification commitment it already publishes (contract or data-processing terms, trust-centre page, SOC 2 availability) and flags the ones with none. Every month after: a written request sent on the firm's behalf to each flagged vendor asking for a 72-hour breach-notice commitment, the reply or the silence logged with its date, new vendors added, the register and program re-dated, and a one-page evidence memo for the file. Annually: a review memo and a refreshed program. Delivered as PDFs and an editable file the CCO adopts and signs.. Amended Regulation S-P has applied to smaller advisers since 3 June 2026. If your firm still has no written incident response program, you are already past the date - and the service-provider side is the part you cannot finish in a weekend, because it depends on other people answering. We prepare the program around the systems you actually use, the customer-notification letter set and the 30-day playbook, and a service-provider register that records what each of your vendors already commits to on breach notice and flags the ones that commit to nothing. Every month we write to the flagged vendors on your behalf, log exactly what came back and what did not, add any new vendor, re-date the register and the program, and send you a one-page evidence memo for the file. What we cannot do is make a custodian or a software vendor sign anything - no one can - so we promise the request, the log and the dated file, not the vendor's answer. We are not a law firm and we do not give legal advice: your CCO reviews, adopts and signs everything. This covers the incident response program, the notification set and the service-provider file. It does not cover your disposal procedures, your annual privacy notice or the rest of your compliance manual.
This is a recurring subscription: each month you receive a new Regulation S-P Incident Response Program and Service-Provider Evidence File covering that period.
This subscription renews automatically. Your card is charged the amount shown at checkout every month until you cancel. There is no minimum term and no cancellation fee.
You can cancel at any time from the cancel link in every email we send you — or by replying to any of our emails or writing to claude@dansventures.com. Cancelling stops the next charge; you keep access for the period you have already paid for.
We send your Regulation S-P Incident Response Program and Service-Provider Evidence File to the email address you use at checkout, and also make it available through a private download link. If it hasn’t arrived, check your spam or Promotions folder, then reply to your receipt or email claude@dansventures.com and we’ll resend it right away.
Please give us accurate information when we ask for it (Firm legal name as it appears on Form ADV, SEC file number and CRD number, Name and title of the person who will adopt and sign the program, Number of non-clerical employees). The Regulation S-P Incident Response Program and Service-Provider Evidence File is built only from what you tell us.
Northfile is a document preparation and record-keeping service. It is not a law firm, is not affiliated with or endorsed by the SEC, FINRA or any state securities regulator, and provides no legal, tax, investment or financial advice. Documents are generated from information you supply; your chief compliance officer is responsible for reviewing, adopting, signing and maintaining them, and for the firm's compliance with Regulation S-P. Requests we send to your service providers on your behalf may go unanswered - we log the outcome as it happens and cannot compel any provider to respond or agree. No examination outcome is promised.
Every order is backed by our 30-day money-back guarantee. If you’re not satisfied for any reason, just reply to your receipt or email claude@dansventures.com within 30 days and we’ll refund you in full — no forms, no questions. See our Refund Policy for details.
Your Regulation S-P Incident Response Program and Service-Provider Evidence File is licensed for your own business use. Please don’t resell or redistribute it.
The Regulation S-P Incident Response Program and Service-Provider Evidence File is provided “as is.” To the fullest extent permitted by law, our total liability for any claim relating to your order is limited to the amount you paid for it.
We may update these terms from time to time. The version posted here at the time of your purchase governs your order.
These terms are governed by the laws of the State of Texas, USA.
← Back to homeNorthfile is operated by Dan's Ventures. Charges appear on your statement as “DANS VENTURES”. Questions? Email claude@dansventures.com.