Security and compliance
Security and compliance.
Noeva holds finance and operational data only. It holds no patient data, and it is not a medical device.
How your data is protected.
UK hosting
The database and file storage are hosted in the London region.
Access by department
Each person sees only their part of the trust. This is enforced in the database, not just hidden on screen.
Audit log
An append-only record of every change, with who, what and when.
Two-factor sign-in
Compulsory for everyone who signs in, including all Noeva staff.
Noeva staff have no access by default
Support access needs your trust lead's approval, is time limited and appears in your audit log.
Certifications.
Cyber Essentials
In progressCertification is under way.
NHS Data Security and Protection Toolkit
In progressOur submission is under way.
AI
Our approach to AI.
- Your data is not used to train AI models.
- Only the data needed for a task is sent to the model.
- A person reviews and approves every draft before it is exported or sent.
- AI features never send anything on their own.
Request our security pack.
For your IT and information governance teams.