Q3 exposure is concentrated in three renewals totalling $1.84M.
- Northwind Ltd — SOC 2 lapsed in July with no remediation plan filed. [1]
- Kestrel Data — three SLA breaches in Q3, credits already claimed. [2]
- Adley Group — sole-source dependency with no exit clause. [3]
Northwind is the only one where legal has flagged an unresolved indemnity gap.