NELVIAN TRUST CENTER
Security you can understand.
Controls you can examine.
See how Nelvian protects access, application workflows and business data across iNwiSe and iNSight—built on Oracle Cloud Infrastructure and Oracle APEX.
TRUST POSTURE
• Actively governed
Cloud foundation
Oracle Cloud Infrastructure
Application platform
Oracle APEX
Access model
Role-based & tenant-aware
Evidence
Available during security review
CONTROL CATALOG
How protection is put into practice.
Search the catalog or select a category. Each item explains the control and where its implementation sits.
Oracle APEX authorization schemes and server-side checks support page, process and action-level control. Privileged activities are limited to authorized roles.
Evidence available: role matrix and authorization walkthroughData requests are evaluated using the signed-in user’s context and customer ownership rules; interface filtering is not treated as the security boundary.
Evidence available: architecture and tenant-filter reviewVerification expiry, retry limits, rate controls and session timeout reduce replay, brute-force and unattended-session risk.
Evidence available: recovery-flow demonstrationApplication controls are applied server-side and can include checksums, item protection and authorization before data-changing processes execute.
Evidence available: APEX security configuration reviewChanges follow governed release practices. Security testing and remediation activities are prioritized based on impact and exposure.
Evidence available: release and vulnerability-management summaryProduction releases are reviewed and restricted to authorized personnel, with validation appropriate to the change.
Evidence available: deployment process summaryTLS protects supported browser and integration traffic. Database, storage and backup encryption depends on the contracted deployment configuration.
Evidence available: deployment-specific configuration reviewAccess, retention, export and deletion are handled according to business purpose, legal requirements and applicable customer terms.
Evidence available: privacy and data-processing summaryThe applicable hosting region, environment topology and service commitments are confirmed for each subscription or deployment.
Evidence available: deployment architecture summaryAvailable records can identify the acting user, time and relevant change details. Coverage varies by workflow and deployment.
Evidence available: audit-trail demonstrationBackup frequency, retention and recovery targets are aligned to the contracted service and validated through appropriate restore checks.
Evidence available: plan-specific recovery summaryEvents are prioritized by business impact, investigated by accountable owners and communicated under applicable service and contractual terms.
Evidence available: support and incident-response overviewPRIVACY COMMITMENTS
Your data supports your business – not ours.
Nelvian limits information use to delivering, securing and supporting the agreed service. Access is purpose-based, and applicable retention, export and deletion arrangements are clarified during onboarding.
✓ Purpose-limited collection and use
✓ Restricted operational access
✓ Deployment-specific retention arrangements
✓ Subprocessor transparency during review
SHARED RESPONSIBILITY
Protection works best when ownership is clear.
Nelvian manages
Platform controls, governed operations, application maintenance and service support within the agreed scope.
Customers manage
User access decisions, device security, accurate configuration, lawful data use and timely reporting of concerns.
NEED DEEPER ASSURANCE?
Bring your security and compliance questions.
We can walk your team through relevant architecture, safeguards, evidence and shared responsibilities for your planned deployment.
