Security and data isolation

How Runnova protects your data

Official address: runnova.cloud

Strict company isolation

Every database query is limited to your company's id, which our servers read from your signed-in session — never from the browser. One company cannot reach another's data.

Protection against prompt injection

Your knowledge is given to the AI as reference data only, kept separate from its instructions, so text inside a document or a message cannot take control of Nova.

Short-lived connection tokens

No API keys ever reach the browser. Live voice sessions use temporary tokens that expire within 5 minutes.

Encrypted in transit and at rest

Connections, including live voice, are encrypted with TLS, and the database is encrypted at rest (AES-256).