Nova helps protect restaurant, employee, and guest data through secure infrastructure, encrypted communications, access controls, and continuous monitoring across the platform.
Certifications & standards
What Nova is certified for.
PCI DSS Level 1
The highest level of payment card industry compliance. Required for any platform processing more than 6 million transactions annually.
CCPA Compliant
Nova supports California Consumer Privacy Act requirements through privacy controls, data governance practices, and customer data rights management.
SOC 2 Type II
Independent attestation of Nova's security, availability, processing integrity, confidentiality, and privacy controls. Report available under NDA.
Security program
How we protect your restaurant and your guests.
Encryption
Data is encrypted in transit and at rest using industry-standard security practices across the Nova platform.
Access control
Role-based permissions, authentication controls, and audit trails help protect sensitive business and guest data.
Secure Infrastructure
Nova runs on modern cloud infrastructure designed for reliability, scalability, and operational security.
Security Testing
Regular security assessments, vulnerability scanning, and continuous reviews help identify and address risks.
Monitoring
Continuous monitoring and logging help maintain platform health, detect anomalies, and support investigations.
Incident response
Established response procedures help Nova quickly investigate, contain, and communicate security incidents.
Documentation
What's available for your security review.
MSA / DPA — Master Services Agreement and Data Processing Addendum (provided during sales process)
SOC 2 Type II report — available under NDA during procurement review
PCI Attestation of Compliance (AoC) — current AoC available on request
Nova combines enterprise-grade security, privacy controls, compliance, and operational reliability in a platform designed for modern restaurant operators.
