Resources
Learn and reference
Practical content about compliance programmes, frameworks, evidence management and responsible assurance.
Latest resources
Guide
Evidence that survives an audit
What separates an artefact an assessor accepts from one that generates a follow-up request, and how to capture the difference at collection time.
ReadExplainer
Choosing your first compliance framework
SOC 2, ISO/IEC 27001 or Essential Eight — how the choice usually gets made, and the questions worth answering before committing.
ReadGuide
Control ownership in small teams
Assigning meaningful accountability when the same three people own everything.
ReadGuide
Preparing for a SOC 2 Type II period
What changes when the assessment covers a period rather than a point in time.
ReadExplainer
Risk acceptance that holds up
Recording acceptance as a decision with an owner, a basis and a review date.
ReadProduct update
NOVA platform update
Release notes will be published here once the first public release note is approved.
ReadSee NOVA against your own compliance obligations
Start free to explore the workflow, or walk through your framework, evidence and reporting requirements with us.
NOVA supports the readiness decision. Final launch and risk decisions remain human decisions.