Security

You sign in to Nuvoraq with an email address and password, with email verification, or by using Google sign-in. Authentication is managed by our platform's authentication provider. Nuvoraq does not store or have access to your raw password.

For each client, Nuvoraq creates a unique onboarding link tied to that client's record. You share the link with your client. Anyone with the link can view and complete that specific client's onboarding request — clients do not need to create an account or sign in.

Treat onboarding links as you would any sensitive link: share them directly with the intended client and avoid posting them publicly.

Only you and the people you invite to your Nuvoraq account can see the clients and onboarding information you create. Access is enforced on a per-account basis. A client can only access their own onboarding link, not your dashboard or other clients.

Your account information, client records and onboarding data are stored in Nuvoraq's database. Your data remains associated with your account for as long as you use the service.

Documents your clients upload are stored using the platform's file storage and are accessible to you (and anyone you've invited to your account) from the client's record, and to the client through their onboarding link.

Where document intelligence is used, Nuvoraq may process uploaded documents using AI-assisted tools to identify document type, extract relevant information, match documents to onboarding requirements, and flag potential issues for staff review.

The analysis may extract visible information such as names, addresses, dates, company details, and reference information from uploaded documents. Extracted information may be compared against onboarding requirements and client-entered details to help your team confirm that everything required has been provided.

AI findings are intended to assist staff review. Nuvoraq does not treat AI document analysis as formal identity verification or compliance approval, and does not independently certify document authenticity or make final AML, KYC, identity, legal, regulatory, or compliance decisions.

Potential inconsistencies, low-confidence findings, or sensitive cases are surfaced for human review. AI does not replace professional judgement — your team remains responsible for any decision to accept, reject, or request further information from a client.

We use the following third-party providers where appropriate:

• Stripe — processes subscription payments. Card details are handled directly by Stripe and never pass through Nuvoraq.
• Google, Meta and Microsoft — advertising and analytics measurement, where enabled, to understand how the website is used and to measure campaign performance.
• AI / LLM service provider — powers Nuvoraq's AI-assisted document analysis and onboarding review features. Uploaded documents and onboarding information may be processed by the platform's AI service provider to produce the analysis described above.

If you have a security concern or believe you've found a vulnerability, please contact us through our Contact page and include "Security" in your message. We will review and respond as soon as we can.