Shared Identity Plane
Centralized authentication through auth.novatria.com with SSO, MFA, RBAC/ABAC, and suite-aware session routing. Roles and entitlements propagate cross-suite.
Platform
The active control plane for Data & AI
One trust platform. Two suites. Governance and Security share a common operating model — one control plane, one policy engine, one evidence model, one identity plane — while preserving suite-specific workflows and data-plane isolation.
Operating model
Discover → Control → Observe → Prove
One lifecycle narrative that spans both suites across data, AI, identities, cloud workloads, and SaaS applications.
01
Discover
Continuously map assets, identities, sensitive data, and AI systems across your entire data and security estate.
02
Control
Apply governance and security policy once through a unified policy engine — RBAC/ABAC, quality gates, posture rules — enforced across both suites.
03
Observe
Real-time telemetry, SLO dashboards, drift detection, and anomaly alerts across data quality, security posture, and AI model performance.
04
Prove
Export auditor-ready evidence packs for SOC 2, GDPR, HIPAA, and ISO 27001 with full traceability across controls, incidents, and remediations.
Core capabilities
What powers the platform
Six capabilities that work together to provide unified trust across governance and security operations.
Control Plane
Unified operations center that correlates governance and security events, routes incidents, and surfaces cross-suite insights — all through one dashboard.
Learn more →Discovery & Classification
AI-powered scanning that detects PII, PHI, PCI, and secrets across 50+ data sources with 99.2% precision — feeding classifications directly into policies.
Learn more →Policy Engine
OPA-based policy-as-code with 200+ pre-built rules. Define once, enforce everywhere — across data access, quality gates, cloud posture, and AI safety.
Learn more →Identity & Access
Centralized SSO, MFA, RBAC/ABAC with cross-suite propagation. Entitlement certification, session intelligence, and zero-trust API key management.
Learn more →Observability
Unified metrics layer with ML-powered anomaly detection, drift monitoring, SLO tracking, and OpenTelemetry-format export to Datadog, Grafana, and Splunk.
Learn more →Audit & Evidence
Immutable, cryptographically hashed evidence for SOC 2, GDPR, HIPAA, PCI-DSS, and ISO 27001. Customers report 60–80% faster audit prep.
Learn more →Governance suite
18 modules for Data & AI governance
Centralizes metadata, policies, lineage, quality, and access workflows into one experience for discovering, governing, and monitoring all data and AI assets.
- ✓Connectors & Ingestion
- ✓Metadata Catalog
- ✓Data Lineage & Impact Analysis
- ✓Policy & Entitlements (RBAC/ABAC)
- ✓Data Quality & Contracts
- ✓AI System Governance
- ✓Business Glossary & Marketplace
- ✓Search, Co-Pilot & Administration
Security suite
10 modules for cyber risk
A unified cyber risk platform that discovers your attack surface, understands identity risk, and drives down real-world exposure across cloud, SaaS, and supply chain.
- ✓Attack Surface Discovery
- ✓IAM Guard (Identity & Access)
- ✓Cloud & SaaS Security (CSPM)
- ✓Threat Defense (XDR-lite)
- ✓Vulnerability Management
- ✓Incident Response Playbooks
- ✓Supply Chain & SBOM Security
- ✓AI & Deepfake Detection
Shared infrastructure
What the suites share
Common infrastructure ensures consistency while suite-specific data planes maintain isolation.
Unified API Contracts
Both suites expose platform manifests and integration catalogs through versioned REST and GraphQL APIs. The UI uses the same APIs available to customers.
Common Evidence Model
Policy evaluations, incident actions, and remediation steps produce a shared evidence schema — composable across suites for unified audit reports.
Cross-Suite Observability
Correlation IDs, SLO dashboards, drift detection, and anomaly alerts are standardized. Trace a data-quality drop to a security incident automatically.
Enterprise-grade
Built for scale, security, and compliance
Kubernetes-orchestrated
Auto-scaling microservices with blue-green, zero-downtime deployments
Multi-cloud
Deploy on AWS, Azure, or GCP — or bring your own cloud account (BYOC)
Multi-tenant isolation
Cryptographic tenant separation with optional dedicated infrastructure
Data residency
Per-tenant region selection — US, EU, APAC, or custom — with separate control/data planes
SOC 2 Type II
AES-256 at rest, TLS 1.3 in transit, tenant-level key management
99.95% SLA
Control plane 99.95%, data plane 99.99%, with P1 response in 15 minutes
Choose an entry point
Start with Governance or Security based on your immediate operator need, then expand with shared trust workflows across both suites.