Northflank

Connect Northflank to collect cloud infrastructure evidence with automated compliance tests, switched on per workspace.

Connect with an API token

1. In Northflank:

   1. Make sure the team has an API role (it must first be created by a team member with permission); the token gets its permissions from that role, so give the role only what Safeguard needs to read.
   2. Open the API tokens page (app.northflank.com/s/account/api/tokens) and click Create API token.
   3. Enter a Name and Description, choose the Associated RBAC role, and set the Token lifetime.
   4. Click Create API token and copy the token immediately; it is shown only once.

   Northflank shows the secret only once, so copy it before you leave the page.

   Northflank's public documentation does not cover every step.

   The fetched pages give the token flow but not the click path for creating the API role or its permission picker labels, nor where the Team ID is displayed. Team members can generate an API token in the team's settings once an API role exists.

   Source: northflank.com, northflank.com, checked 2026-10-07.

   The permissions Safeguard needs: Team > Members > Read.

2. On Compliance › Connectors, open Northflank, click Connect, choose API token and fill in:

   Field	What to enter
   API token	Required. Stored encrypted and never shown again.
   Team ID	Required.

3. Click Connect with token.

Frameworks

Safeguard's automated tests read Northflank and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

These tests are switched on per workspace by the Safeguard team.

Related

• Cloud Infrastructure connectors
• Compliance connectors: how connecting works, card statuses and multiple accounts
• Connector setup reference: every connector in one table
• Frameworks and connectors: how connectors provide evidence for frameworks