# Security

> Protect your engineering advantage with encryption, restricted access, and deployment options purpose-built for the hardware domain.

Source: https://nominal.io/security

# Enterprise-grade security for the most sensitive programs

Protect your engineering advantage with encryption, restricted access, and deployment options purpose-built for the hardware domain.

[Try Nominal](https://nominal.io/demo.md?from=%2Fsecurity&cta=security-hero)[Visit our trust center](https://trust.nominal.io/)

Security practices

## All your data and decisions, protected by default

Security is built into every layer of Nominal, from zero-trust access to end-to-end encryption and constant testing.

### Infrastructure security

Single or multi-tenant in AWS GovCloud, in your own AWS, Azure, or GCP account, or on your own hardware, including air-gapped and classified networks.

### Product security

Every release ships from hardened, verified components backed by a documented vulnerability program and incident runbooks written before they're needed.

### Data and privacy

Export-control marking, in-region data residency, role-based access, and a full audit trail. Everyone sees what they're cleared for, and nothing more.

### Organizational security

A dedicated security engineering team secures both Nominal and its product, from employee laptops and office access to the platform itself, reporting to our Head of InfoSec. Our live Trust Center shows our current posture anytime.

### Internal security procedures

Background check before day one, U.S.-persons-only access to ITAR data, and a formal insider threat program with a designated Insider Threat Program Senior Official. Every person with access to customer data is known, screened, and accountable.

### Integrations

Single sign-on with automated provisioning. SQL, APIs, SDK, and MCP all run under the same hardened identity and access control.

### Zero-trust access

No request is trusted by default. Every one is authenticated and checked against the user's role and clearance before any data moves.

### End-to-end encryption

Data is encrypted in transit and at rest, from the system that recorded it to the workbook where your team reviews it.

### Constant testing

Security checks run continuously against the platform, so weaknesses are found and fixed before they reach your programs.

## Compliance

We use modern cloud infrastructure, automated security tooling, and independent audits to ensure your information remains secure, always.

[Trust center](https://trust.nominal.io/)

- ### SOC 2 Type II  
Security, availability, and confidentiality controls  
Audited
- ### Cyber Essentials Plus 3.3  
Hands-on testing of our technical controls  
Certified
- ### NIST SP 800-171  
All 110 controls, assessed for CMMC Level 2  
110 / 110
- ### ITAR  
U.S. cloud regions, operated by U.S. persons  
U.S. only

All systems Nominal

Security review

## Adopt one governed platform instead of ten shadow tools

Talk with our team about deployment options, access controls, and how Nominal fits your compliance program.

[Try Nominal](https://nominal.io/demo.md?from=%2Fsecurity&cta=security-cta)[Trust center](https://trust.nominal.io/)