Firms that hold client data
Professional firms hold sensitive client data, and Northwind secures the devices and accounts where it lives.
Northwind provides managed IT and security to businesses in Los Angeles, Orange County and San Diego. Support runs on Pacific hours, and our team works on site across the state.
Northwind runs daily support and security for California businesses and plans the larger projects with them.
We work with businesses in the state’s largest metros, north and south.
Protect client data across Los Angeles offices and devices.
Keep Orange County systems running and backed up.
Keep San Diego teams secure and supported on Pacific hours.
Manage sign-ins and devices for Bay Area teams.
Give Sacramento organizations a help desk and managed security.
Monitor and support Central Valley networks.
Professional firms hold sensitive client data, and Northwind secures the devices and accounts where it lives.
Some AI tools fall under California’s automated-decision rules. Our AI practice identifies which ones you use and what they decide.
Support for California comes from our Boise office. The same team provides IT for nonprofits. See the full service area.
Day-to-day support runs remotely on Pacific hours. Technicians travel anywhere in California for on-site work.
The help desk is open 8am to 4pm Pacific on weekdays. Northwind is available 24/7 for emergencies.
Last reviewed . This section summarizes state law and is not legal advice.
The California Privacy Protection Agency (CPPA) requires larger companies that hold significant California data to complete an independent cybersecurity audit every year. First reports are due between 2028 and 2030, depending on revenue.
Northwind runs the security controls an auditor reviews and keeps the evidence ready.
From January 1, 2027, CPPA rules also govern automated tools that make significant decisions about people, and they require a risk assessment for each.
Northwind identifies the automated tools you use and prepares what each risk assessment needs.
Yes. Los Angeles and Orange County businesses reach our help desk on Pacific hours, and technicians travel to their offices for on-site work.
Northwind starts a smaller firm with managed devices, protected accounts and monitored backups. The CPPA audit rarely applies at that size, and we confirm that against your numbers.
No, unless you pass the CCPA revenue line and hold data on 250,000 Californians or sensitive data on 50,000, or earn half your revenue from selling data.
No. The audit has to be independent. We run the controls and keep the evidence ready for your auditor.
Book a consultation to see where your California offices stand on security and support.
Already a client?Open a ticketPay an invoice