Skip to main content

Security and reliability

Keep access control, keys, and auditing within one boundary

Establish a clear security boundary for model access with least privilege, sensitive-data protection, request auditing, and runtime policies.

Get started View docs
Policy boundary
Access controlAudit recordsCredential protection

Security and reliability

Cover every critical step from integration to reliable operations

Nov Apis Bring complex model integration, routing, governance, and usage management into one clear workflow.

01

Credential protection

Upstream credentials are stored encrypted, public APIs omit sensitive fields, and administrative actions require appropriate identity and permissions.

02

Access control

Control users, administrators, groups, API key ACLs, rate limits, and concurrency.

03

Auditing and observability

Record critical administrative actions and request outcomes for incident tracking, cost reconciliation, and troubleshooting.

Security controls

Keep keys, permissions, and auditing within one boundary.

Every layer follows least privilege while preserving complete observability for the team.

Security and governance

Controls designed for trusted AI access

The controls below describe available platform security capabilities and standards alignment. They do not claim that this deployment holds any third-party certification; consult the administrator for its actual configuration and compliance status.

SOC 2 control alignment

Provide access controls, operational records, and change tracking to help operators establish appropriate control processes.

GDPR data governance capabilities

Configure processing workflows around data minimization, access management, and retention policies.

ISO 27001 control mapping

Core security capabilities can map to common technical controls in an information security management system.

Sensitive-use configuration support

Configure stricter authentication, auditing, and data-processing boundaries for the deployment environment.

Encryption capabilities

Protect data in transit and store sensitive credentials encrypted to reduce plaintext exposure.

Fine-grained access control

Constrain model and API access through users, groups, API keys, and rate policies.

Auditing and observability

Retain critical administrative actions and request outcomes for reconciliation, tracing, and incident response.

Data residency policy support

Plan data location, retention periods, and access scope around the deployed infrastructure.

Ready to build the future of AI?

Join developers using Nov Apis to build products, starting with your first API request.

Get started now View docs