Deterministic modernization platform that converts legacy stored procedures, ETL, and data orchestration logic into modern, production-ready pipelines while keeping your data and code safely inside your own environment.

Does Novuz need access to production data?

Only for reconciliation, and only inside your environment. You choose production data, a masked copy or a sample. The assessment needs code only, no data.

Can Novuz run in an air-gapped network?

Yes. Novuz ships as a container or VM with no required outbound connections. The resolver can run on a local model with no external API calls.

Does Novuz send our code to a language model?

The conversion engine makes no model calls. The resolver, for about 5% of objects, runs on a model you approve. With a local model there is no outbound connection at all; with a hosted model under your own agreement, only the edge-case fragments go to it.

Can our agents operate the pipelines, and what can they reach?

The delivered pipelines can be exposed as MCP tools your agents call. An agent gets only what you expose, under your own access, approvals and audit logging, and every action is logged in your environment.

Is Novuz SOC 2 certified?

Novuz runs inside your existing security boundary and controls. Novuz holds no SOC 2 or ISO certification today; SOC 2 Type I is planned. We provide the architecture document and questionnaire answers your security team needs to assess it as a workload.

Security

Your code and data stay inside your walls

Novuz runs as software inside your environment. The product never sends your code or data to Novuz, and no outbound connection is required.

Sovereignty

What does data sovereignty mean with Novuz?

Algorithm sovereignty. The parser, the inference layer and the rules library run inside your infrastructure, fully isolated. Nothing is called out to Novuz.
Model sovereignty. The resolver runs on the model you approve: Claude or Gemini through your own enterprise agreement, or a local model through Ollama with no external calls at all. If you choose a hosted model, only the edge-case fragments go to it. The knowledge base it draws on is built from your estate and stays with you.
Data sovereignty. Data never leaves your environment. Reports, logs and converted code are written to storage you control.
Agent access. Agents reach only what you expose, through the platform’s APIs and the pipelines’ MCP tools, under your identity provider, approvals and audit logging, the same controls as a person.

Deployment

How is Novuz deployed?

Novuz ships as a Docker container or a VM image. You run it in your own cloud account or data center.

AWS, Azure, Google Cloud or on-premises
Runs under your identity and access controls
Network access set by your team
Can run with no outbound internet access
Air-gapped installation supported; updates delivered as signed images you pull on your own schedule

Data handling

What happens to my code and data?

Code and data are read and written inside your perimeter only.
The conversion engine makes no external model calls.
The resolver knowledge base is stored in your environment.
Knowledge bases are never shared across customers.
Logs and reports stay in storage you control.
For the estate assessment, you can run the discovery container yourself and send us only the inventory report; the code never leaves.

Security review

What do I need for a security review?

Ask for the security pack. It contains the architecture document, the data flow diagram, the deployment guide for Docker and VM, the list of outbound connections (none required), and completed answers to standard security questionnaires. Enter your work email and we send it within one business day.

Novuz runs inside your existing security boundary and controls. Your logging and access policies apply to it like any other workload you run.

FAQ

Frequently asked questions

How we measure: Methodology

Last reviewed: October 29, 2026

Find out what your logic debt is costing you.

Every object counted, lineage, dead code and a fixed price in three business days. $3,000, credited.

Take the logic debt scorecard

Not sure which door? The scorecard takes ten minutes and tells you.