Where we stand, without overstating it. We would rather tell you plainly what we do and do not hold than imply a certification we have not earned.
Nolte does not currently hold a SOC 2 or ISO 27001 certification, and we do not have a formal audit in progress. We are not going to claim otherwise. What we do have is a defined set of controls, described on our Security page, and infrastructure built on providers that carry their own attestations.
The platforms behind nolte.io maintain their own independent SOC 2 and/or ISO 27001 programs. The controls those attestations cover (physical security, infrastructure hardening, encryption at rest) are inherited through them. Each provider, with its purpose and region, is listed on our DPA and subprocessors page.
Our work is concentrated in insurance, healthcare, and financial services, so we build for the evidentiary standard those clients are held to. The NolteOS model, where AI proposes, a senior human approves, and every decision is logged, gives a delivery an auditable decision history, which is the posture a regulated examiner expects. More detail is on our Security page.
We are set up to support your vendor-risk process. We will complete security questionnaires, provide a data processing agreement with Standard Contractual Clauses, and walk your team through the controls above. Send your assessment or request to security@nolte.io.
Last reviewed: October 13, 2026.