Novo North Security

Last updated: May 2, 2026

Infrastructure and isolation

Novo North uses organization-level isolation, row-level security, scoped authentication, and isolated agent compute. Agent sessions run in bounded sandbox environments with separate runtime credentials.

Encryption

Traffic is encrypted in transit with TLS. Persistent storage and backups are encrypted at rest by infrastructure providers.

Access controls

User sessions, agent runtime tokens, app keys, and service credentials use distinct scopes and lifetimes. Organization members have role-based access controls.

Application security

Novo applies input validation, SSRF protections, upload controls, service-boundary checks, security headers, and monitoring. Agent database access uses restricted roles and product-level authorization.

Responsible disclosure

Report suspected vulnerabilities to security@novoindustries.co.