01
HIPAA-compliant service
Nova is built to handle clinical information within a HIPAA-compliant service. An organization-wide Business Associate Agreement is available in the product.
Security & trust
Clinical trust is part of the product.
Nova handles sensitive workflows with clear access boundaries, responsible data practices, and a clinician-in-control approach to AI.
02
Controlled access
Authenticated accounts and organization membership controls limit access to the clinicians and administrators who belong in each workspace.
03
Purpose-limited processing
Recordings, transcripts, and clinical documentation are processed to provide Nova’s features. Nova does not use customer content to train its own AI models.
04
Clinician review stays central
Nova produces drafts and suggested codes for review. The clinician remains responsible for confirming, editing, and using the final documentation.
05
Transparent subprocessors
Nova publishes the service providers that support infrastructure, transcription, AI processing, payments, email, monitoring, and operations.
06
Deletion controls
Users can delete visits from the application. Deleted visits remain recoverable in Trash for 30 days before permanent removal.