Trust & security
Evidence, boundaries, and operational practices.
This page is for legal, procurement, and IT reviewers — what NuvonHub controls, what clients retain, and which protections come from third-party providers.
Legal entity
Nuvonhub Private Limited · Registered in India · Registration details on request for procurement
Trading as NuvonHub. Remote-first delivery · clients worldwide. Registration details available on request for procurement when not published here.
Scope of this page
What this page covers — and what it does not
Covers
- How NuvonHub handles enquiry and project data on this website
- Typical hosting and delivery practices for client builds
- Documented subprocessors for the NuvonHub site and standard delivery stack
- Where to find Privacy, Cookie, and Accessibility policies
Does not cover
- SOC 2, ISO 27001, or other certification claims — we do not state these unless separately contracted and documented
- Client production environments you administer — credentials, backups, and access remain your responsibility unless scoped in your SOW
- Uptime SLAs or incident-response timelines unless explicitly agreed in writing for an enterprise engagement
- Penetration testing programmes or formal audits unless requested and scoped per project
NuvonHub controls
Practices we apply on engagements
- Data use
- Client and enquiry data is used only to deliver services, operate this website, and meet legal obligations. We do not sell personal data.
- Confidentiality
- Client systems, credentials, and business data stay confidential. We sign NDAs and align to your data processing requirements where engagements require it.
- Code ownership & handover
- You receive repositories and handover documentation for work we deliver. Engagement-specific access and IP terms are in your proposal and SOW.
- Analytics on this site
- Google Analytics runs only if you accept analytics cookies. Data is pseudonymous and aggregated. Withdraw consent via Cookie settings in the footer.
- Security contact
- Security questionnaires and incident reports: security@nuvonhub.com. Standard security questionnaires within two business days.
Client responsibilities
What stays with you unless scoped otherwise
- Admin access, MFA, and user provisioning on CRM, commerce, and ops tools you own
- Backups and retention policies inside your SaaS accounts unless backup scope is in your SOW
- Lawful basis and notices for end-customer data you collect through sites we build
- Review and approval of subprocessors you select for your stack (payment, email, ERP, etc.)
Third-party providers
Protections from hosting and client-chosen tools
- Hosting & TLS
- Production sites and applications are typically hosted on established cloud platforms (including Vercel) with HTTPS/TLS for connections. Platform security and availability are governed by each provider's terms.
- Client-chosen tools
- Payment, CRM, email, ERP, and analytics tools you select operate under their own security models. We integrate with them; we do not control their infrastructure.
Subprocessors
Documented subprocessors
Third parties we typically use to deliver services and operate this site. Project-specific tools are listed in your Statement of Work. Updated May 2026.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Vercel Inc. | Website hosting, CDN, and deployment | Site content, access logs, form submissions in transit | United States / EU regions (provider-dependent) |
| Web3Forms | Contact form delivery | Name, email, message, and fields you submit on /contact | United States |
| Google LLC (Analytics) | Aggregated site analytics (consent-gated) | Pseudonymous usage, pages viewed, device type (if you accept analytics) | United States / global |
| Calendly LLC | Meeting scheduling embed on /contact (if enabled) | Name, email, meeting time — submitted directly to Calendly | United States |
| Fontshare (Indian Type Foundry) | Web font delivery | Technical logs such as IP address and browser type | Global CDN |
| Google LLC (Workspace / Calendar) | Business email and meeting scheduling | Correspondence with NuvonHub, meeting metadata | Global |
| Client-chosen CRM / commerce tools | Integrations built for your project | As defined in your SOW and DPA | Per your vendor selection |
Related
Procurement and company context
Questions for legal or IT
Contact security or book a call.
Standard security questionnaires within two business days. For general enquiries, use info@nuvonhub.com.