Platform
One governed workspace for compliance, security and AI.
NOVA connects frameworks, requirements, controls, evidence, policies, risks, assets, AI governance and assurance in one traceable operating model. Changes to the underlying record flow through the programme instead of being recreated across spreadsheets, folders and separate assessments.
How NOVA connects the programme
NOVA brings a governed catalogue of 27 framework capabilities into one operating model. Activation depends on customer scope, data and requirements; the catalogue does not mean every framework is active for every customer.
01
Requirements & Frameworks
Scope the obligations that apply to your programme.
02
Controls & Owners
Define expectations, ownership and testing.
03
Evidence & Integrations
Collect contextual evidence from governed sources.
04
Risk & Policy
Connect operational risk and approved policy.
05
Human Review
Validate evidence and make the accountable decision.
06
Readiness & Assurance
Report from the same reviewed records.
Shared control model
One control. Many requirements.
When the same control legitimately satisfies several frameworks, NOVA lets your team maintain it once and map it to each relevant obligation. Ownership, testing and evidence can be reused where the underlying expectation is genuinely the same.
One governed record
Frameworks, requirements, controls, evidence, policies, risks and assets stay connected with ownership and history.
Reuse where valid
A control or evidence item can support more than one obligation when the mapping genuinely satisfies each requirement.
Human decisions
NOVA accelerates your launch preparation, but final decisions remain human.
Integrations & Connectors
Bring evidence in from the systems your organisation already uses.
NOVA supports governed connectors and manual evidence upload with structured metadata, human validation and control mapping. Connector availability follows the governed inventory, so operational and planned integrations remain clearly distinguished.
Currently available through the public inventory: GitHub, Manual upload.

AI Governance
Govern AI within the same operating model.
Connect AI systems, requirements, policies, risks, impact assessments, controls and evidence in the same governed workspace. Where relevant, NOVA can support work aligned to ISO/IEC 42001 while keeping oversight explicit.
- AI governance requirements and policy context
- Risk and impact assessment records
- Controls, evidence and human review in one traceable workflow
NOVA accelerates your launch preparation, but final decisions remain human.

Evidence lifecycle
Automation with accountability at every step.
Evidence management reduces repetitive work, but readiness is derived from records that have been contextualised, mapped, reviewed and kept current.
- Collect from manual uploads and governed integrations
- Contextualise with source, period, owner and scope metadata
- Map evidence to every control it legitimately supports
- Review and validate before it counts towards readiness
- Refresh ageing evidence and report the reviewed record
Collect → Contextualise → Map → Review → Refresh → Report
The same governed record can support readiness reporting, Trust Centre publication and scoped auditor workflows, subject to the appropriate human approval and disclosure boundaries.
- Structured metadata
- Legitimate cross-framework reuse
- Human validation
- Freshness and traceability
Capabilities
The capabilities that make the operating model work
Feature cards are driven by NOVA's governed capability data. Availability is shown as it is defined in the source, including partial and planned areas.
Framework management
Available nowActivate the frameworks your organisation works towards, record scope, and map requirements once instead of maintaining parallel programmes.
Read moreControls and control testing
Available nowDefine what each control is expected to do, who owns it, how often it is tested, and whether the last test passed.
Read moreEvidence management
Available nowCollect evidence into governed storage, map it to the controls it supports, and have a person validate it before it counts.
Read morePolicy management
Available nowGovern policy intent with versioning, approval routing and scheduled review, so the published policy is the approved one.
Read moreRisk management
Available nowRecord risks with owners, assess them consistently, assign treatment, and capture acceptance as an explicit decision.
Read moreAsset governance
Partly availableMaintain the register of systems, services and data stores your controls depend on, and relate them to risks and evidence.
Read moreReporting
Available nowReadiness and coverage reporting derived from live control and evidence records, not from a separately maintained status sheet.
Read moreTrust Centre
Available nowPublish approved assurance information to customers and prospects without exposing the underlying confidential evidence.
Read moreAuditor Portal
Available nowGive auditors and assessors scoped access to the evidence for an engagement, with requests and findings tracked in one workflow.
Read moreNOVA AI Assistant
Available nowWorking alongside you, every step of your compliance journey.
Read moreArchitecture
A connected compliance, security and assurance record
NOVA keeps the boundaries visible: tenant data stays scoped, activated requirements stay explicit, and external assurance is drawn from reviewed records rather than duplicated status reports.
Tenant-scoped records and access boundaries
Explicit framework scope and activation decisions
Traceable mappings between requirements, controls and evidence
Readiness, Trust Centre and auditor workflows from reviewed records
NOVA assists with readiness and evidence management. Certification, attestation and regulatory conclusions remain with authorised independent, regulatory or customer-appointed parties.
Talk to us
See how NOVA fits your compliance programme.
Bring your frameworks, evidence and assurance requirements and explore the operating model with the NOVA team.
See NOVA against your own compliance obligations
Explore the governed Free access path, or walk through your framework, evidence and reporting requirements with us.
NOVA accelerates your launch preparation, but final decisions remain human.
