Security
Built to protect company and traveller data
How we protect it
Controls built into the platform
Your company's data stays your company's
Every record in Nevo belongs to one company, and every request is checked on our servers against the company of the person signed in. One company can never see another company's people, trips, expenses or spend.
Sign-in by a dedicated identity provider
Sign-in is handled by an established identity provider. Nevo never sees or stores your password. Sessions are verified on every request.
Roles decide what each person can see and do
Travellers, approvers, finance and administrators each have their own permissions. Wallet, analytics, policy and people settings are limited to the roles that need them.
Encrypted in transit and at rest
All traffic to Nevo uses HTTPS. Data is stored in managed databases that encrypt it at rest, and access to production systems is limited to named staff.
An audit trail of important changes
Changes to travel policy, approval routes, people and roles, and every approval decision, are recorded with who made them and when.
Card details never touch Nevo
Card payments are taken by our PCI DSS compliant payment processor. Card numbers go directly to the processor and are never stored on Nevo servers.
Price checked before every booking
Before a booking is made, the fare or rate is rechecked. If it has changed, the traveller sees the new price and decides again. The price confirmed is the price charged.
Only the data the trip needs
We collect what is needed to book and manage business travel, and use it for that. We do not sell personal information. Location data is removed from JPEG receipt photos when they are uploaded. See the privacy notice for details.
Related features
Controls you set in Nevo
Travel policy
Travel and expense policy applied before anyone books
Choose a ready-made policy or set your own limits for cabins, fares, hotels and expenses. Nevo explains each rule in plain words.
Approvals
Approval workflows that only send exceptions
Send exceptions to the traveller's manager, named people or any approver. Decide in the app or from the email. In-policy trips do not wait.
Spend visibility
Travel spend reporting as it happens
Spend, compliance, savings against policy and trip reasons, by month, traveller and destination, ready to export.
Found a security issue, or need our security details?
Email us with as much detail as you can. We read every report, reply to confirm we have it and keep you updated until it is resolved. Customers reviewing Nevo can ask for our security questionnaire answers the same way.
See Nevo in action
Book a demo and we will walk you through booking, policy, approvals and reporting for the way your company travels. Prefer to start now? Sign up online and set your policy today.