SOC2C

Nova Benefits security & compliance

An overview of Nova Benefits's security posture — compliance, penetration testing, subprocessors, and data handling — verified on SOC2C (Listed).

SOC 2 statusSOC 2 Type II · Listed
FrameworksSOC 2 Type II, ISO 27001
Penetration testNot listed
SubprocessorsNot listed
HostingNot listed
Trust centerView

Security questions about Nova Benefits

Is Nova Benefits secure?
Security isn't a single yes/no, but Nova Benefits is SOC 2 Type II compliant and holds SOC 2 Type II, ISO 27001. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Nova Benefits have a bug bounty or vulnerability disclosure program?
Nova Benefits hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@novabenefits.com or via a /security page.
Who are Nova Benefits's subprocessors?
Nova Benefits's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.
Where does Nova Benefits host or store data?
Nova Benefits's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.
Where is Nova Benefits's trust center or security page?
Nova Benefits's trust center is at https://novabenefits.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

See Nova Benefits's full SOC 2 profile →