Australian-founded. Working worldwide.AU founded · Worldwide

NovaSoft Trust Centre

Trust Centre

Everything you need to check before trusting us with your business: security, privacy, where data lives and how to reach us.

Product information checked 7 October 2026

Practical transparency

Start with the right information

Each product handles data differently. This page brings together our company details, each product’s privacy notice and the questions worth asking before you sign up.

Security & privacy

Know how information is handled

Find each product’s privacy notice, our company privacy policy and how to report a security issue.

Explore data & providers

Procurement & delivery

Understand the engagement

See exactly who you’re dealing with and what should be agreed in writing.

Working with NovaSoft

Official NovaSoft websites

Find the right NovaSoft address

These are the official web addresses for our company, shop and products.

Additional NovaSoft addresses

These additional domains are registered for NovaSoft. Our preferred company address is novasofttechnologies.com.

  • novarischat.com
  • novarisllm.com
  • novasoft1.com
  • novasoftau.com
  • novasoftau.com.au
  • novasoftmail.com
  • novasoftnews.com
  • novasoftproductions.com
  • novasofttech.net
  • novasoft.technology
  • novasofttech.org
  • safespaceau.com
  • novasofttech.dev
  • novasoftechnologies.com

A familiar-looking address doesn’t prove a message is from us. If something looks unusual, go to our website yourself and contact us using the details there.

Product boundaries

Data locations follow the product

Hosted business platform

NovaSoft One

Its published product notice places primary CRM data and private documents in AWS’s Sydney region. Cloudflare delivery, billing and enabled integrations have their own processing locations.

Read One’s product privacy notice

Windows development preview

WordHeld

WordHeld’s current development work centres on local conversation workflows, editable notes and Studio and Focus views. Managed AI remains in development. Assess information handling against the particular version and configuration; public installers are not available yet.

Explore the current beta

iOS applications

UPly, LifeTabs, MindSafe & MemoryMate

Check the notice and App Store privacy information for the individual app. Permissions, synchronisation and optional services vary by app.

Find the app and its official links

Company enquiries

This website & recruitment

Our company privacy notice covers enquiries, this website, job applications and business dealings. Each product and the shop has its own notice.

Read company privacy information

Published product register

Core providers for NovaSoft One

The providers below are identified in One’s published provider register. This is a summary for NovaSoft One, rather than a provider list for every NovaSoft product.

Amazon Web Services

Purpose

PostgreSQL database, private document storage and transactional email.

Published location

Primary resources in Sydney, Australia.

Cloudflare

Purpose

Application delivery, security, bot protection and database connectivity.

Published location

A global network; requests may be processed near the user.

Stripe

Purpose

Checkout, subscriptions, invoices and payment status.

Published location

Stripe’s global payment infrastructure.

Optional integrations may introduce additional providers and processing locations. The workspace administrator controls whether those integrations are enabled.

Practices & evidence

Security practices, with clear scope

NovaSoft One’s published privacy notice describes access controls, tenant separation, encryption in transit and storage, private file access, audit records, rate limits and multi-factor authentication options. Those statements apply to One.

Encryption & access

For NovaSoft One, consult the product notice and your workspace’s available security settings. For other products or a custom deployment, request the applicable encryption, authentication and access arrangements. Exact cipher standards, key management and configuration should be confirmed for that environment.

Managed IT & change management

Our managed IT policy library sets out a draft framework for access, patching, vulnerability management, changes, logging and recovery. Applicable controls, owners and targets must be adopted in the service schedule. Publishing the framework does not verify implementation across every client environment.

AI & sensitive information

We don’t collect customer or applicant information to train AI models. When you use an AI feature, an AI provider may still process your request, so check the product’s notice before entering anything sensitive, and always review important AI results.

Read the company AI information statement

Assessment & compliance documents

Our policies are public, and we can provide evidence for a procurement review on request. To be clear: NovaSoft does not hold ISO 27001 certification, a SOC 2 report or an assessed Essential Eight maturity level, and our providers’ certifications don’t extend to us.

Backup & continuity

Agree what recovery needs to achieve

For a hosted product or managed environment, confirm what is backed up, the retention period, restore scope and responsibility before relying on a recovery plan. Database recovery and document recovery may have different requirements.

Before an engagement

Define the recovery requirement

Identify critical systems, acceptable data loss, recovery priorities and who authorises a restore. Record any agreed recovery targets in writing.

Read the engagement guide

Managed IT framework

Backup & continuity policy

Our draft policy covers recovery needs, protected backup access, job monitoring, restore testing and continuity responsibilities.

Open the policy library

Vulnerability disclosure & privacy

Report a security or privacy concern

To report a security weakness, unauthorised access or a privacy concern, email us with the product name and “Security report” or “Privacy request” in the subject line.

  1. Describe the affected public address or feature and what you observed.
  2. Include the date, time and safe reproduction steps or an on-screen reference.
  3. Redact personal information. Do not send credentials, MFA codes, API keys or customer records in ordinary email.
  4. If supporting material is sensitive, ask us for an appropriate transfer method first.

Status & incidents

Availability & incident communication

Our status and availability page provides checks of selected public website addresses and direct service links. Website reachability does not establish the health of signed-in features, payments, storage or every customer environment.

For a suspected incident, use your agreed support or incident route. The company privacy notice describes assessment and notification where required by applicable law or the engagement. Notification channels and any contractual timeframes should be agreed for the relevant service.

Company records

Find NovaSoft on buy NSW

Our public supplier profile identifies NovaSoft Technologies Pty Ltd, ABN 31 694 025 379, and lists our self-identified technology products and services.

Policies & procurement

Documents for your due diligence

Sending a security questionnaire? Tell us the product, how you’ll use it, how sensitive the data is and which documents you need. Some material may need an NDA first.

Need information for procurement?

Tell us the product or service and what your organisation needs to know.