Security

Security built into every layer of Nova.

Nova helps protect restaurant, employee, and guest data through secure infrastructure, encrypted communications, access controls, and continuous monitoring across the platform.
Certifications & standards

Certified, audited, and built on secure infrastructure.

SOC 2 Type II

certified
Independent attestation of Nova's security, availability, processing integrity, confidentiality, and privacy controls, tested over an audit period rather than at a point in time. Report available under NDA.

PCI DSS

Compliant via certified providers
Card payments run through PCI DSS Level 1 certified payment providers, the highest level of payment card industry compliance. Cardholder data is tokenized and never stored on Nova systems.

AWS infrastructure

Inherited controls
Nova runs on AWS and inherits its physical, network, and data center security controls, including isolation, redundancy, and regional compliance programs maintained by AWS.
Security program

How we protect your restaurant and your guests.

Encryption

Data is encrypted in transit and at rest using industry-standard security practices across the Nova platform.

Access control

Role-based permissions, authentication controls, and audit trails help protect sensitive business and guest data.

Secure Infrastructure

Nova runs on modern cloud infrastructure designed for reliability, scalability, and operational security.

Security Testing

Regular security assessments, vulnerability scanning, and continuous reviews help identify and address risks.

Monitoring

Continuous monitoring and logging help maintain platform health, detect anomalies, and support investigations.

Incident response

Established response procedures help Nova quickly investigate, contain, and communicate security incidents.
Documentation

What's available for your security review.

  • MSA / DPA - Master Services Agreement and Data Processing Addendum, provided during the sales process
  • SOC 2 Type II report - available under NDA during procurement review
  • PCI documentation - Attestation of Compliance for Nova's certified payment providers, available on request
  • Architecture and controls overview - infrastructure, data flow, and access model documentation for security teams
Request security documentation

Built on a platform you can trust.

Nova combines enterprise-grade security, privacy controls, compliance, and operational reliability in a platform designed for modern restaurant operators.
Reach us
Talk to sales