Nova helps protect restaurant, employee, and guest data through secure infrastructure, encrypted communications, access controls, and continuous monitoring across the platform.
Certifications & standards
Certified, audited, and built on secure infrastructure.
SOC 2 Type II
certified
Independent attestation of Nova's security, availability, processing integrity, confidentiality, and privacy controls, tested over an audit period rather than at a point in time. Report available under NDA.
PCI DSS
Compliant via certified providers
Card payments run through PCI DSS Level 1 certified payment providers, the highest level of payment card industry compliance. Cardholder data is tokenized and never stored on Nova systems.
AWS infrastructure
Inherited controls
Nova runs on AWS and inherits its physical, network, and data center security controls, including isolation, redundancy, and regional compliance programs maintained by AWS.
Security program
How we protect your restaurant and your guests.
Encryption
Data is encrypted in transit and at rest using industry-standard security practices across the Nova platform.
Access control
Role-based permissions, authentication controls, and audit trails help protect sensitive business and guest data.
Secure Infrastructure
Nova runs on modern cloud infrastructure designed for reliability, scalability, and operational security.
Security Testing
Regular security assessments, vulnerability scanning, and continuous reviews help identify and address risks.
Monitoring
Continuous monitoring and logging help maintain platform health, detect anomalies, and support investigations.
Incident response
Established response procedures help Nova quickly investigate, contain, and communicate security incidents.
Documentation
What's available for your security review.
MSA / DPA - Master Services Agreement and Data Processing Addendum, provided during the sales process
SOC 2 Type II report - available under NDA during procurement review
PCI documentation - Attestation of Compliance for Nova's certified payment providers, available on request
Architecture and controls overview - infrastructure, data flow, and access model documentation for security teams
Nova combines enterprise-grade security, privacy controls, compliance, and operational reliability in a platform designed for modern restaurant operators.
