Security & compliance
Security that matches what audit work demands.
Engagement files hold sensitive information. NOMIA is built with that in mind, from authentication to data residency.
Security & compliance
Security that matches what audit work demands.
Engagement files hold sensitive information: findings, working papers, personal data on people and processes. NOMIA is built and operated with that sensitivity in mind, at every layer.
Enterprise SSO
Microsoft Entra ID, Google Workspace, Okta / SAML. Your organisation's authentication rules apply to NOMIA.
Role-based permissions
Director, auditor, auditee, committee: each role sees and can only act on the engagements and documents it covers.
Encryption in transit and at rest
TLS on every connection, encrypted storage and backups, secrets managed outside application code.
EU data residency
Data and backups are hosted in the European Union, with no transfer outside that perimeter.
Immutable audit log
Every action is timestamped and attributed: who created, changed or approved what, and when.
GDPR alignment
A documented processing register, defined retention periods, and straightforward exercise of data-subject rights.
Beyond the checklist
Built to be trusted with sensitive work.
Controls on paper matter less than how they hold up day to day. These are the practices behind the six commitments above.
Least-privilege access reviews
Access is granted engagement by engagement and reviewed on a regular basis, so people retain only the permissions their current role needs.
Incident response process
A documented process covers detection, containment and customer notification, so an incident is handled on a defined path rather than improvised.
Vendor and sub-processor transparency
We keep a clear list of the sub-processors involved in running NOMIA, and communicate changes rather than making them silently.
Give internal audit the tool it deserves.
A single demo is enough to see what NOMIA changes in the day-to-day of your engagements and in preparing your audit committee.