Question 1

What does NOVA Compliance do?

Accepted Answer

NOVA brings frameworks, controls, evidence, policies, risks, assets, reporting and external assurance into one governed workspace. It helps an organisation understand what is ready, what needs attention and what should happen next.

Question 2

Who develops and operates NOVA?

Accepted Answer

NOVA Compliance is developed and operated by Eredox Pty Ltd. It is an independent Eredox product.

Question 3

Can NOVA be used outside Australia?

Accepted Answer

Yes. The frameworks currently available include internationally recognised standards, and the workspace model is not jurisdiction-specific. Some frameworks are regional by nature, and each framework page states its jurisdiction.

Question 4

Which frameworks are available today?

Accepted Answer

SOC 2, ISO/IEC 27001, Essential Eight and ISO/IEC 42001 are available now.

Question 5

Which frameworks are planned?

Accepted Answer

The NIST Cybersecurity Framework, HIPAA and the Australian Government Information Security Manual are planned. They are labelled as planned throughout the site and are not operational today.

Question 6

Can one control satisfy several frameworks?

Accepted Answer

Yes. Controls are shared and mapped to the requirements they satisfy across every activated framework, so evidence is reused rather than collected repeatedly.

Question 7

Does NOVA certify our organisation?

Accepted Answer

No. NOVA assists with readiness and evidence management. Certification, attestation and regulatory conclusions remain with authorised independent, regulatory or customer-appointed parties.

Question 8

How is evidence collected?

Accepted Answer

Evidence can be uploaded manually with structured metadata, and collected through available connectors. Manual upload with reviewer validation is the baseline; the integrations page states the status of each connector.

Question 9

Does evidence count as soon as it is uploaded?

Accepted Answer

No. A reviewer validates each item against the control expectation. Until that review occurs the item is held but does not contribute to readiness.

Question 10

What happens to old evidence?

Accepted Answer

Evidence carries a freshness expectation. Items approaching or past that expectation are surfaced so they can be refreshed before an assessment.

Question 11

What does the AI assistant actually do?

Accepted Answer

It interprets and summarises evidence, prepares policy and control description drafts, identifies likely gaps against activated requirements and explains what a requirement is asking for. It works from the governed content in your workspace.

Question 12

Can the assistant approve anything?

Accepted Answer

No. Approval of policies, acceptance of risk, declarations of readiness and any external statement are human actions. NOVA supports the readiness decision. Final launch and risk decisions remain human decisions.

Question 13

What are the assistant's limitations?

Accepted Answer

It can misinterpret an artefact, miss context that was never recorded in the workspace, or produce a draft that reads well but is not accurate for your environment. Every output requires review.

Question 14

Is our data separated from other organisations?

Accepted Answer

NOVA operates a tenant model. Evidence, controls, policies and reporting are scoped to your tenant, with role-based access inside it.

Question 15

Can auditors access our workspace?

Accepted Answer

Yes, through the Auditor Portal. Access is scoped to the engagement and stays inside your tenant boundary, with requests and findings tracked in one workflow.

Question 16

Is Eredox certified?

Accepted Answer

The security page describes the practices in place. We do not claim certifications that Eredox has not obtained, and no certification is asserted on this website.

Question 17

How is NOVA priced?

Accepted Answer

NOVA is a subscription with entitlements per plan. Indicative amounts are shown on the pricing page and require Eredox approval before they are contractually binding. Enterprise is quoted per organisation.

Question 18

What support is included?

Accepted Answer

Support varies by plan, from documentation and community resources on Free through to agreed arrangements on Enterprise. The pricing page includes a support comparison.

Question 19

What is the Trust Centre?

Accepted Answer

It is where approved assurance information can be published to customers and prospects without exposing the underlying confidential evidence. Publication requires explicit approval.

Frequently asked questions

About NOVA

Frameworks

Evidence and workflow

AI and human approval

Security and access

Commercial and support

See NOVA against your own compliance obligations