Infrastructure security
Single or multi-tenant in AWS GovCloud, in your own AWS, Azure, or GCP account, or on your own hardware, including air-gapped and classified networks.
Enterprise-grade security for the most sensitive programs
Protect your engineering advantage with encryption, restricted access, and deployment options purpose-built for the hardware domain.
Security practices
All your data and decisions, protected by default
Security is built into every layer of Nominal, from zero-trust access to end-to-end encryption and constant testing.
Product security
Every release ships from hardened, verified components backed by a documented vulnerability program and incident runbooks written before they're needed.
Data and privacy
Export-control marking, in-region data residency, role-based access, and a full audit trail. Everyone sees what they're cleared for, and nothing more.
Organizational security
A dedicated security engineering team secures both Nominal and its product, from employee laptops and office access to the platform itself, reporting to our Head of InfoSec. Our live Trust Center shows our current posture anytime.
Internal security procedures
Background check before day one, U.S.-persons-only access to ITAR data, and a formal insider threat program with a designated Insider Threat Program Senior Official. Every person with access to customer data is known, screened, and accountable.
Integrations
Single sign-on with automated provisioning. SQL, APIs, SDK, and MCP all run under the same hardened identity and access control.
Zero-trust access
No request is trusted by default. Every one is authenticated and checked against the user's role and clearance before any data moves.
End-to-end encryption
Data is encrypted in transit and at rest, from the system that recorded it to the workbook where your team reviews it.
Constant testing
Security checks run continuously against the platform, so weaknesses are found and fixed before they reach your programs.
Compliance
We use modern cloud infrastructure, automated security tooling, and independent audits to ensure your information remains secure, always.
All systems Nominal