Northfleet is the sovereign supply chain Canada's classified Kubernetes still has to buy.
A Canadian-incorporated Kubernetes supply chain vendor supplying the bundle protocol, attestation chain, and audit trail that cleared engineering teams apply to their Protected B and Secret clusters.
The procurement floor moved. The supply chain didn't.
Canada's Defence Industrial Strategy committed the country to a domestic defence industrial base, with explicit procurement preference for Canadian-controlled infrastructure. The DSRB is now headquartered in Canada. BDC's Defence Platform is deploying capital to operators that can hold the jurisdiction line.
Every meaningful Kubernetes platform in production at Canadian defence primes today has a foreign-jurisdictional supply chain governing what enters it.
No Canadian-incorporated vendor ships the supply chain for classified Kubernetes with a customer-held trust path that no foreign authority governs. That is the gap. Northfleet is the answer to it.
Verifiable by design. Sovereign by jurisdiction.
Northfleet's attestation chain lets engineering and accreditation teams verify what is running using widely available cryptographic tooling, on their own terms, without privileged access to Northfleet.
Verifiable end to end
Every artifact is signed and accompanied by a software bill of materials. The attestation chain, from signing to apply, is inspectable with standard open-source signing tooling, by the customer's own engineers and accreditation teams. Trust is earned in the math, not the marketing.
Canadian vendor, customer-held keys
Northfleet is incorporated in Canada. It holds no customer data and no customer signing keys: the customer signs with its own keys and verifies offline against its own trust root. Every release Northfleet ships carries provenance binding it to the source it was built from, which the customer can check without Northfleet's participation. The architecture assumes the vendor itself can be compromised or compelled.
“Compelling Northfleet does not produce a silent backdoor.”
Run classified workloads
on Canadian terms.
If you are reading this on purpose, you are likely buying, building, or backing the thing Northfleet is building. We would like to hear from you.