Skip to main content

Platform

One governed workspace for compliance, security and AI.

NOVA connects frameworks, requirements, controls, evidence, policies, risks, assets, AI governance and assurance in one traceable operating model. Changes to the underlying record flow through the programme instead of being recreated across spreadsheets, folders and separate assessments.

How NOVA connects the programme

NOVA brings a governed catalogue of 27 framework capabilities into one operating model. Activation depends on customer scope, data and requirements; the catalogue does not mean every framework is active for every customer.

01

Requirements & Frameworks

Scope the obligations that apply to your programme.

02

Controls & Owners

Define expectations, ownership and testing.

03

Evidence & Integrations

Collect contextual evidence from governed sources.

04

Risk & Policy

Connect operational risk and approved policy.

05

Human Review

Validate evidence and make the accountable decision.

06

Readiness & Assurance

Report from the same reviewed records.

Shared control model

One control. Many requirements.

When the same control legitimately satisfies several frameworks, NOVA lets your team maintain it once and map it to each relevant obligation. Ownership, testing and evidence can be reused where the underlying expectation is genuinely the same.

One governed record

Frameworks, requirements, controls, evidence, policies, risks and assets stay connected with ownership and history.

Reuse where valid

A control or evidence item can support more than one obligation when the mapping genuinely satisfies each requirement.

Human decisions

NOVA accelerates your launch preparation, but final decisions remain human.

Integrations & Connectors

Bring evidence in from the systems your organisation already uses.

NOVA supports governed connectors and manual evidence upload with structured metadata, human validation and control mapping. Connector availability follows the governed inventory, so operational and planned integrations remain clearly distinguished.

Currently available through the public inventory: GitHub, Manual upload.

NOVA integrations and connectors workflow showing business systems feeding evidence into controls, frameworks, human review and compliance reporting.
Connect business systems to NOVA to collect evidence, map controls and frameworks, support human review and produce compliance reporting.

AI Governance

Govern AI within the same operating model.

Connect AI systems, requirements, policies, risks, impact assessments, controls and evidence in the same governed workspace. Where relevant, NOVA can support work aligned to ISO/IEC 42001 while keeping oversight explicit.

  • AI governance requirements and policy context
  • Risk and impact assessment records
  • Controls, evidence and human review in one traceable workflow

NOVA accelerates your launch preparation, but final decisions remain human.

NOVA AI governance workflow showing policies, controls, evidence and requirements feeding into AI-assisted review with human approval.

Evidence lifecycle

Automation with accountability at every step.

Evidence management reduces repetitive work, but readiness is derived from records that have been contextualised, mapped, reviewed and kept current.

  • Collect from manual uploads and governed integrations
  • Contextualise with source, period, owner and scope metadata
  • Map evidence to every control it legitimately supports
  • Review and validate before it counts towards readiness
  • Refresh ageing evidence and report the reviewed record

Collect → Contextualise → Map → Review → Refresh → Report

The same governed record can support readiness reporting, Trust Centre publication and scoped auditor workflows, subject to the appropriate human approval and disclosure boundaries.

  • Structured metadata
  • Legitimate cross-framework reuse
  • Human validation
  • Freshness and traceability

Capabilities

The capabilities that make the operating model work

Feature cards are driven by NOVA's governed capability data. Availability is shown as it is defined in the source, including partial and planned areas.

Framework management

Available now

Activate the frameworks your organisation works towards, record scope, and map requirements once instead of maintaining parallel programmes.

Read more

Controls and control testing

Available now

Define what each control is expected to do, who owns it, how often it is tested, and whether the last test passed.

Read more

Evidence management

Available now

Collect evidence into governed storage, map it to the controls it supports, and have a person validate it before it counts.

Read more

Policy management

Available now

Govern policy intent with versioning, approval routing and scheduled review, so the published policy is the approved one.

Read more

Risk management

Available now

Record risks with owners, assess them consistently, assign treatment, and capture acceptance as an explicit decision.

Read more

Asset governance

Partly available

Maintain the register of systems, services and data stores your controls depend on, and relate them to risks and evidence.

Read more

Reporting

Available now

Readiness and coverage reporting derived from live control and evidence records, not from a separately maintained status sheet.

Read more

Trust Centre

Available now

Publish approved assurance information to customers and prospects without exposing the underlying confidential evidence.

Read more

Auditor Portal

Available now

Give auditors and assessors scoped access to the evidence for an engagement, with requests and findings tracked in one workflow.

Read more

NOVA AI Assistant

Available now

Working alongside you, every step of your compliance journey.

Read more

Architecture

A connected compliance, security and assurance record

NOVA keeps the boundaries visible: tenant data stays scoped, activated requirements stay explicit, and external assurance is drawn from reviewed records rather than duplicated status reports.

Tenant-scoped records and access boundaries

Explicit framework scope and activation decisions

Traceable mappings between requirements, controls and evidence

Readiness, Trust Centre and auditor workflows from reviewed records

NOVA assists with readiness and evidence management. Certification, attestation and regulatory conclusions remain with authorised independent, regulatory or customer-appointed parties.

Talk to us

See how NOVA fits your compliance programme.

Bring your frameworks, evidence and assurance requirements and explore the operating model with the NOVA team.

See NOVA against your own compliance obligations

Explore the governed Free access path, or walk through your framework, evidence and reporting requirements with us.

NOVA accelerates your launch preparation, but final decisions remain human.

Guided compliance journey

Start your compliance journey without spreadsheets

Answer a few practical questions to see useful framework starting points and next steps. Your answers stay in this page session; they are not sent or saved.

Start the guided journey