Noru

{
  "id": "noru",
  "name": "Noru",
  "tier": "tier2",
  "adapter_status": "implemented",
  "connect_method": "rsc_flight",
  "auth": "none",
  "normalized_coverage": {
    "organizations": true,
    "certifications": true,
    "controls": true,
    "subprocessors": true,
    "documents": "policies",
    "securityUpdates": false
  },
  "rate_limit": {
    "recommendedRps": 10,
    "maxConcurrency": 10,
    "readCeiling": "clean to 15rps; Vercel WAF sheds 403 challenges at ~20rps (12%), 100% 403 by 30rps",
    "limiter": "Vercel edge WAF/bot-challenge — throttles via 403 (NOT 429)",
    "penalty": "403 challenge page (fast ~16ms reject); appears transient, but treat 403 as backpressure",
    "backoff": "treat a 403 spike as throttle; back off + exponential retry. ~2-3 tenants so 10rps is ample"
  },
  "stats": {
    "providerId": "noru",
    "name": "Noru",
    "adapterStatus": "implemented",
    "organizations": 3,
    "trustCenters": 3,
    "certifications": 8,
    "controls": 421,
    "subprocessors": 156,
    "documents": 111,
    "securityUpdates": 0,
    "sources": 3
  }
}

{
  "support_status": "supported",
  "sync_cadence": "daily_full_sync",
  "rate_limit": {
    "recommendedRps": 10,
    "maxConcurrency": 10,
    "readCeiling": "clean to 15rps; Vercel WAF sheds 403 challenges at ~20rps (12%), 100% 403 by 30rps",
    "limiter": "Vercel edge WAF/bot-challenge — throttles via 403 (NOT 429)",
    "penalty": "403 challenge page (fast ~16ms reject); appears transient, but treat 403 as backpressure",
    "backoff": "treat a 403 spike as throttle; back off + exponential retry. ~2-3 tenants so 10rps is ample"
  },
  "known_source_count": 3,
  "harvestable_source_count": 1,
  "seed": "seeds/noru-backfill-2026-06-11.json"
}

{
  "companies": 3,
  "trust_centers": 3,
  "certifications": 8,
  "controls": 421,
  "subprocessors": 156,
  "documents": 111,
  "security_updates": 0,
  "sources": 3
}

{
  "score": 88,
  "score_kind": "bounded_0_to_100_observed_normalized_trust_center_coverage",
  "granularity_tier": "deep_security_posture",
  "observed_capabilities": {
    "trust_centers": true,
    "certifications": true,
    "controls": true,
    "subprocessors": true,
    "documents": true,
    "security_updates": false,
    "provenance": true
  },
  "available_capabilities": [
    "trust_centers",
    "certifications",
    "controls",
    "subprocessors",
    "documents",
    "provenance"
  ],
  "missing_capabilities": [
    "security_updates"
  ],
  "analysis_readiness": {
    "vendor_risk_profile": true,
    "security_questionnaire_evidence": true,
    "subprocessor_monitoring": true,
    "document_inventory": true,
    "compliance_tracking": true,
    "security_advisory_monitoring": false,
    "provenance_audit": true
  },
  "counts": {
    "trust_centers": 3,
    "certifications": 8,
    "controls": 421,
    "subprocessors": 156,
    "documents": 111,
    "security_updates": 0,
    "sources": 3
  }
}

{
  "access_profiles": [
    {
      "key": "noru_rsc_flight",
      "count": 3
    }
  ],
  "access_levels": [
    {
      "key": "unknown",
      "count": 3
    }
  ],
  "data_access": {
    "certifications": 3,
    "controls": 2,
    "subprocessors": 3,
    "documents": 3,
    "security_updates": 0
  }
}

{
  "rank": 19,
  "segment": "startup_smb",
  "owner": "Noru (independent)",
  "auth": "none",
  "connect": {
    "method": "rsc_flight",
    "fetch": "GET https://{tenantDomain}/",
    "key": "self.__next_f flight payload with trust_page_id item list",
    "officialApi": null
  },
  "discovery": {
    "cnameTarget": "trust-proxy.noru.tech",
    "handleInCname": false,
    "note": "Next.js App Router trust page behind Vercel; the interesting content is in the RSC flight payload.",
    "fingerprints": [
      "CNAME trust-proxy.noru.tech",
      "self.__next_f flight",
      "trust_page_id item list"
    ],
    "channels": [
      "dns_cname_sweep",
      "crt.sh",
      "builtwith:Noru"
    ]
  },
  "backfill_2026_06_11": {
    "priorKnown": 2,
    "harvestableNow": 1,
    "netNew": 1,
    "netNewFromCommonCrawl": 0,
    "totalKnown": 3,
    "seed": "seeds/noru-backfill-2026-06-11.json"
  }
}

{
  "self": "/v1/coverage/providers/noru",
  "provider": "/v1/providers/noru",
  "companies": "/v1/companies?provider=noru",
  "trust_centers": "/v1/trust-centers?provider=noru",
  "sources": "/v1/sources?provider=noru"
}