🎁 Limited offer - Free Nova self-order kiosk ($1,495 value) with your first location - Book a demo to claim
Trust Center

Enterprise-grade trust, built into Nova.

Restaurants depend on Nova to run critical parts of their business every day. Security, privacy, reliability, compliance, and responsible AI are built into the platform from the ground up, not added later.
Nova is designed to meet the expectations of enterprise restaurant organizations while protecting the systems, data, and operations they depend on.
Explore trust at NovaRequest security documentation
Trust at every layer 01 Security Encryption, RBAC, monitoring 02 Privacy Data lifecycle controls 03 Responsible AI Human oversight 04 Compliance SOC 2, PCI, ADA 05 Reliability Built to keep running One platform. One data model. Nova

SOC 2 Type II

Independently audited security controls.

Encrypted end to end

Data encrypted in transit and at rest.

Role-based access

Least-privilege permissions and audit logging.

Cloud-native on AWS

High availability with offline store operation.
The five layers

Trust at every layer

Each layer covers a different question enterprise teams ask before they roll Nova out. Start anywhere.
Security
Protecting your business,
your systems, and your data.
Nova uses enterprise security practices across infrastructure, applications, data, and access. Data is encrypted in transit and at rest, access is controlled through role-based permissions, and systems are continuously monitored for security and operational risks.
Privacy
Your data remains your data.
Nova is designed to protect restaurant, employee, and guest information throughout its lifecycle. We maintain clear controls around how data is accessed, processed, stored, and protected across the platform.
Responsible AI
AI built for real restaurant operations.
Nova AI helps teams make faster decisions, automate repetitive work, and improve restaurant operations while keeping people in control. Human oversight, transparency, security, and accountability are fundamental to how we design and deploy AI capabilities.
Compliance
Built to support enterprise requirements.
Nova maintains security and operational controls designed to support enterprise governance, regulatory, and compliance requirements across the platform. This includes SOC 2 Type II certification, PCI DSS aligned payment handling through certified processors with Nova's own certification in progress, and ADA accessibility considered in how the product is designed and built.
Reliability
Built for operations that cannot stop.
Restaurant technology has to work during the busiest moments of the day. Nova is architected for resilience, availability, monitoring, and operational continuity across restaurant and enterprise environments.
Security review package
Everything your review team asks for.
Architecture overview, control summaries, data flow detail, and completed security questionnaires for your assessment process. Available to customers and active evaluations under NDA.
Talk to us

Trust is part of the platform.

Security and compliance should not slow down innovation. Nova brings enterprise controls, operational resilience, privacy, and responsible AI together within one connected restaurant platform, so organizations can move faster without compromising trust.
Contact the security team
Report a vulnerability
Send findings to security@novatab.com. We acknowledge reports and keep researchers updated through resolution.
Security questionnaires
We complete enterprise security questionnaires as part of your procurement and architecture review.
Ask about a specific control
Bring your requirement. We will tell you plainly what is in place today and what is on the roadmap.
Common questions

What enterprise teams ask first

Is Nova SOC 2 certified?
Icon
Icon

Yes. Nova is SOC 2 Type II certified. The report is available to customers and active evaluations under NDA.

How is restaurant and guest data protected?
Icon
Icon

Data is encrypted in transit and at rest, access is granted through role-based permissions on a least-privilege basis, and administrative activity is audit logged. Nova runs on AWS and inherits its underlying infrastructure security controls.

Who owns the data in Nova?
Icon
Icon

You do. Restaurant, employee, and guest data belongs to the customer. Nova processes it to deliver the platform, and open REST APIs let you get your data out.

How does Nova handle payment card data?
Icon
Icon

Card data is handled through PCI DSS certified payment processors, including Worldpay and Stripe, so sensitive card details stay out of Nova's own systems. Nova's direct PCI certification is in progress.

Is Nova accessible?
Icon
Icon

ADA accessibility is part of how Nova is designed and built, across guest-facing surfaces like kiosk and online ordering as well as staff-facing applications. Bring your specific accessibility requirements to our team and we will walk through them with you.

What happens if a store loses internet?
Icon
Icon

Stores keep taking orders. Nova is built for offline operation at the edge and syncs automatically when the connection returns.

Does Nova use customer data to train AI models?
Icon
Icon

Nova AI is designed to serve the operation it runs in, with human oversight over automated actions. Data use for model improvement is governed by your agreement, and we will walk your team through exactly how each AI capability handles data.

Run restaurant operations with confidence.

See how Nova brings security, privacy, reliability, and responsible AI into one platform built for modern restaurant operators.
Reach us
Talk to sales