Security & privacy
Know how information is handled
Find each product’s privacy notice, our company privacy policy and how to report a security issue.
Explore data & providersNovaSoft Trust Centre
Everything you need to check before trusting us with your business: security, privacy, where data lives and how to reach us.
Practical transparency
Each product handles data differently. This page brings together our company details, each product’s privacy notice and the questions worth asking before you sign up.
Security & privacy
Find each product’s privacy notice, our company privacy policy and how to report a security issue.
Explore data & providersProcurement & delivery
See exactly who you’re dealing with and what should be agreed in writing.
Working with NovaSoftOfficial NovaSoft websites
These are the official web addresses for our company, shop and products.
These additional domains are registered for NovaSoft. Our preferred company address is novasofttechnologies.com.
novarischat.comnovarisllm.comnovasoft1.comnovasoftau.comnovasoftau.com.aunovasoftmail.comnovasoftnews.comnovasoftproductions.comnovasofttech.netnovasoft.technologynovasofttech.orgsafespaceau.comnovasofttech.devnovasoftechnologies.comA familiar-looking address doesn’t prove a message is from us. If something looks unusual, go to our website yourself and contact us using the details there.
Product boundaries
Hosted business platform
Its published product notice places primary CRM data and private documents in AWS’s Sydney region. Cloudflare delivery, billing and enabled integrations have their own processing locations.
Read One’s product privacy noticeWindows development preview
WordHeld’s current development work centres on local conversation workflows, editable notes and Studio and Focus views. Managed AI remains in development. Assess information handling against the particular version and configuration; public installers are not available yet.
Explore the current betaiOS applications
Check the notice and App Store privacy information for the individual app. Permissions, synchronisation and optional services vary by app.
Find the app and its official linksCompany enquiries
Our company privacy notice covers enquiries, this website, job applications and business dealings. Each product and the shop has its own notice.
Read company privacy informationPublished product register
The providers below are identified in One’s published provider register. This is a summary for NovaSoft One, rather than a provider list for every NovaSoft product.
PostgreSQL database, private document storage and transactional email.
Primary resources in Sydney, Australia.
Application delivery, security, bot protection and database connectivity.
A global network; requests may be processed near the user.
Checkout, subscriptions, invoices and payment status.
Stripe’s global payment infrastructure.
Optional integrations may introduce additional providers and processing locations. The workspace administrator controls whether those integrations are enabled.
Practices & evidence
NovaSoft One’s published privacy notice describes access controls, tenant separation, encryption in transit and storage, private file access, audit records, rate limits and multi-factor authentication options. Those statements apply to One.
For NovaSoft One, consult the product notice and your workspace’s available security settings. For other products or a custom deployment, request the applicable encryption, authentication and access arrangements. Exact cipher standards, key management and configuration should be confirmed for that environment.
Our managed IT policy library sets out a draft framework for access, patching, vulnerability management, changes, logging and recovery. Applicable controls, owners and targets must be adopted in the service schedule. Publishing the framework does not verify implementation across every client environment.
We don’t collect customer or applicant information to train AI models. When you use an AI feature, an AI provider may still process your request, so check the product’s notice before entering anything sensitive, and always review important AI results.
Our policies are public, and we can provide evidence for a procurement review on request. To be clear: NovaSoft does not hold ISO 27001 certification, a SOC 2 report or an assessed Essential Eight maturity level, and our providers’ certifications don’t extend to us.
Backup & continuity
For a hosted product or managed environment, confirm what is backed up, the retention period, restore scope and responsibility before relying on a recovery plan. Database recovery and document recovery may have different requirements.
Before an engagement
Identify critical systems, acceptable data loss, recovery priorities and who authorises a restore. Record any agreed recovery targets in writing.
Read the engagement guideManaged IT framework
Our draft policy covers recovery needs, protected backup access, job monitoring, restore testing and continuity responsibilities.
Open the policy libraryVulnerability disclosure & privacy
To report a security weakness, unauthorised access or a privacy concern, email us with the product name and “Security report” or “Privacy request” in the subject line.
Status & incidents
Our status and availability page provides checks of selected public website addresses and direct service links. Website reachability does not establish the health of signed-in features, payments, storage or every customer environment.
For a suspected incident, use your agreed support or incident route. The company privacy notice describes assessment and notification where required by applicable law or the engagement. Notification channels and any contractual timeframes should be agreed for the relevant service.
Company records
Our public supplier profile identifies NovaSoft Technologies Pty Ltd, ABN 31 694 025 379, and lists our self-identified technology products and services.
Policies & procurement
Sending a security questionnaire? Tell us the product, how you’ll use it, how sensitive the data is and which documents you need. Some material may need an NDA first.
Tell us the product or service and what your organisation needs to know.