Security | Nominal

We use cookies. Read more about cookies in our privacy policy (opens in a new tab)
Keeps the site working and remembers these choices. Always on.
Tells us which pages are read and which links are used, so we can improve the site.
Measures our campaigns on other sites, such as LinkedIn and Google.
Protect your engineering advantage with encryption, restricted access, and deployment options purpose-built for the hardware domain.
Security is built into every layer of Nominal, from zero-trust access to end-to-end encryption and constant testing.
Single or multi-tenant in AWS GovCloud, in your own AWS, Azure, or GCP account, or on your own hardware, including air-gapped and classified networks.
Every release ships from hardened, verified components backed by a documented vulnerability program and incident runbooks written before they're needed.
Export-control marking, in-region data residency, role-based access, and a full audit trail. Everyone sees what they're cleared for, and nothing more.
A dedicated security engineering team secures both Nominal and its product, from employee laptops and office access to the platform itself, reporting to our Head of InfoSec. Our live Trust Center shows our current posture anytime.
Background check before day one, U.S.-persons-only access to ITAR data, and a formal insider threat program with a designated Insider Threat Program Senior Official. Every person with access to customer data is known, screened, and accountable.
Single sign-on with automated provisioning. SQL, APIs, SDK, and MCP all run under the same hardened identity and access control.
No request is trusted by default. Every one is authenticated and checked against the user's role and clearance before any data moves.
Data is encrypted in transit and at rest, from the system that recorded it to the workbook where your team reviews it.
Security checks run continuously against the platform, so weaknesses are found and fixed before they reach your programs.
We use modern cloud infrastructure, automated security tooling, and independent audits to ensure your information remains secure, always.
Security, availability, and confidentiality controls
Hands-on testing of our technical controls
All 110 controls, assessed for CMMC Level 2
U.S. cloud regions, operated by U.S. persons
Talk with our team about deployment options, access controls, and how Nominal fits your compliance program.
Nominal, Inc · Hardware intelligence platform