Security & Trust Center
At Novexial Limited, security is at the core of everything we build. We implement enterprise-grade security measures to protect your data and ensure business continuity.
Certifications & Compliance
ISO 27001
Information Security Management System certified. Regular audits ensure continuous compliance.
PCI DSS
Payment Card Industry Data Security Standard compliant for secure payment processing.
GDPR (EU/UK)
Full compliance with European and UK data protection regulations.
India DPDP Act
Compliant with India's Digital Personal Data Protection Act.
HIPAA Ready
Healthcare solutions designed to meet HIPAA requirements.
SOC 2 Type II
(In progress) Independent audit of security, availability, and confidentiality controls.
Data Protection
Encryption
- • In Transit: TLS 1.3 encryption for all data transmission
- • At Rest: AES-256 encryption for all stored data
- • End-to-End: Sensitive data encrypted throughout its lifecycle
- • Key Management: Hardware Security Modules (HSM) for key storage
Data Residency
We offer flexible data residency options to meet your compliance requirements:
- • UK/EU: Data centers in London and Frankfurt
- • India: Data centers in Mumbai and Bangalore
- • Custom: Dedicated infrastructure for enterprise clients
Backup & Recovery
- • Automated daily backups with 30-day retention
- • Geo-redundant backup storage across multiple regions
- • Point-in-time recovery capabilities
- • Regular disaster recovery drills
- • RPO (Recovery Point Objective): < 1 hour
- • RTO (Recovery Time Objective): < 4 hours
Infrastructure Security
Cloud Infrastructure
- • Enterprise-grade cloud hosting (AWS, Azure, GCP)
- • Multi-region deployment for high availability
- • Auto-scaling to handle traffic spikes
- • DDoS protection and WAF (Web Application Firewall)
- • Network isolation and VPC configuration
Application Security
- • Secure coding practices (OWASP Top 10)
- • Regular security code reviews
- • Automated vulnerability scanning
- • Penetration testing by third-party experts
- • Dependency monitoring and patching
Access Control
- • Multi-factor authentication (MFA) enforced
- • Role-based access control (RBAC)
- • Principle of least privilege
- • Regular access reviews and audits
- • Single Sign-On (SSO) support
Monitoring & Response
Our dedicated Security Operations Center (SOC) provides:
- • Real-time threat detection and monitoring
- • Automated incident response systems
- • Security Information and Event Management (SIEM)
- • Intrusion Detection and Prevention Systems (IDS/IPS)
- • Log aggregation and analysis
- • Quarterly security reports for enterprise clients
Security Testing
- •Penetration Testing: Quarterly external pentests by certified ethical hackers
- •Vulnerability Scanning: Daily automated scans across all systems
- •Security Audits: Annual third-party security audits
- •Bug Bounty: Responsible disclosure program for security researchers
Incident Response
We have a comprehensive incident response plan:
- • Dedicated incident response team available around the clock
- • Mean Time to Detect (MTTD): < 15 minutes
- • Mean Time to Respond (MTTR): < 1 hour
- • Post-incident analysis and reporting
- • Customer notification within 72 hours (GDPR compliant)
Security Awareness
Our team undergoes regular security training:
- • Mandatory security awareness training for all employees
- • Quarterly phishing simulations
- • Secure development lifecycle (SDL) training
- • Regular security updates and briefings
Report a Vulnerability
If you discover a security vulnerability, please report it responsibly:
Security Contact:
Email: security@novexial.com
Address: 128, City Road, London, EC1V 2NX, United Kingdom
We commit to acknowledging your report within 24 hours and providing updates every 72 hours until resolution.
Transparency
We believe in transparency regarding our security practices:
- • Annual security reports available to enterprise clients
- • Status page for real-time system health monitoring
- • Incident post-mortems published when appropriate
- • Security documentation available upon request
This security information is current as of January 2025. For the latest security updates or to request additional information, please contact security@novexial.com