Everything a vendor-risk or procurement team needs in one place. If something you need is not here, email security@nolte.io and we will get it to you.
We build software for insurance, healthcare, and financial services, industries where a buyer cannot sign until they understand how a vendor handles their data. So we publish our posture in full, including what we do not yet hold. You will not find a claimed certification we have not earned on these pages.
Our approach rests on three things. The attack surface is small by design: the site is static, with no standing client-data store. The delivery engine behind our work, NolteOS, runs on a simple rule, AI proposes, a senior human approves, and every decision is logged, so a delivery carries an auditable decision history. And we support your process directly: we will complete your security questionnaire and sign a data processing agreement.
The links below are self-serve for your procurement and vendor-risk teams. Anything you need that is not here, email security@nolte.io.
Nolte does not currently hold a SOC 2 or ISO 27001 certification. We build on infrastructure providers that do (Netlify and the subprocessors on our DPA page), and we operate the controls described on our Security page. We publish our posture honestly rather than implying certifications we do not hold. See our full compliance posture for how we support your diligence.
Last reviewed: October 13, 2026.