Technology & security
Engineered for regulatory reporting. Security you can check.
Novus turns account data into validated, regulator-ready FATCA and CRS filings. Every stored field is encrypted, every file is checked three ways before it leaves, and every IDES package is sealed so only the regulator can read it.
01Security & data privacy
Your client data is sensitive. It’s treated that way.
Account-holder TINs, names and balances are the most sensitive data a compliance team holds. Novus keeps as little of it exposed as possible.
-
Field encryption at rest
TINs, names, addresses, account numbers, balances and payments are encrypted with per-customer 256-bit keys (libsodium secretbox) before they’re written. Zero plaintext at rest.
-
TLS 1.3 in transit
Excel and CSV uploads, downloads and every page of the platform travel over TLS 1.3.
-
Sealed for one reader
Each IDES package gets a fresh 256-bit AES key and a random IV. The key is wrapped with the regulator’s RSA public key, so only the regulator can open it.
-
Signed by you
Packages are signed RSA-SHA256 with your sender certificate, so the regulator can verify the file came from you, unaltered.
02Validation engine
Three layers. Errors caught before rejection.
Precision is non-negotiable in tax reporting. Every file passes three checks before it can be exported, and every failure comes back in plain language, with the line and the rule that failed.
- 01 Input Format, completeness and data types, checked as soon as you upload. Missing fields and malformed values are caught immediately.
- 02 Business rules The regulator’s logic, for example: an account balance over $50,000 means a TIN is required, and passive NFE account holders need their controlling persons.
- 03 Schema (XSD) The final check against the official schema the file will be judged by: FATCA XML v2.0.1, CRS XML v3.0 or the jurisdiction’s own variant.
03Automation
Fits your workflow. Not the other way around.
-
Excel to XML
Fill in our templates, upload, and the platform generates the XML. No XML programming or schema expertise needed.
Download templates -
Multi-jurisdiction output
One dataset, a correctly formatted file for each tax authority: HMRC, ACD, the CRA, Revenue, ESTV and the ITD, plus CRS partner jurisdictions.
Jurisdiction guides -
IDES-ready packages
For FATCA Model 2, the complete archive: signed XML, encryption, key wrapping and correctly named metadata. You upload it to IDES with your own credentials.
FATCA reporting -
Corrections
Full DocRefID and CorrDocRefID chains for FATCA and CRS corrections and voids.
FATCA guide
04Two engines
Rules you can audit. Judgement that stays local.
-
Live
Deterministic parser
The three validation layers above. The same input produces the same result, every time, so every decision can be audited.
-
Early access 2027
Local AI
In Novus Desktop, an on-device model reviews every record for inconsistencies the rules can’t express. It runs on your CPU and sends 0 bytes anywhere.
05Why Novus
Versus spreadsheets and hand-built XML.
| Task | Novus | Manual Excel and scripts |
|---|---|---|
| FATCA & CRS XML validation | Input, business-rule and XSD checks before export | Manual, error-prone |
| IDES encryption & signing | Built in: AES-256-CBC, RSA key wrap, RSA-SHA256 | Separate tooling and scripts |
| Multi-jurisdiction output | One dataset, one file per authority | A separate process per country |
| Schema changes | The platform follows FATCA XML and CRS XML v3.0 updates | You track and update templates yourself |
| Error messages | Plain language, with the line and the rule that failed | Raw XSD errors |
CRS 2.0
Ready for CRS XML Schema v3.0.
Most jurisdictions apply CRS 2.0 from the 2026 reporting year, with first filings in 2027. Novus already generates output against CRS XML Schema v3.0 and the matching local schemas, such as AEOI_LUX_V3.0 in Luxembourg.
Free tools
Try the engine before you sign up.
- XML Validator FATCA and CRS files against the exact XSD, with line-by-line errors.
- GIIN Validator A GIIN’s structure, category and country code, segment by segment.
- GIIN Lookup Format check, then where to confirm it on the IRS FFI List.
- Excel templates FATCA and IRIS 1099 worksheets with sample rows.
FAQ
Technology & security questions
Something else? Ask our team
Where is our data stored?
Novus Cloud’s primary servers are in India; our Privacy Policy explains how international transfers are handled. If your institution has data residency requirements, talk to us, or look at Novus Desktop (early access 2027), which keeps filing data on your own machine.
How is our data encrypted?
Sensitive fields are encrypted with per-customer 256-bit keys before they are stored, and everything travels over TLS 1.3. IDES packages are encrypted with AES-256-CBC under a fresh key, wrapped with the regulator’s RSA public key and signed RSA-SHA256.
Which XML schemas does Novus support?
FATCA XML v2.0.1 and CRS XML Schema v3.0, plus the jurisdiction-specific formats for United Kingdom (HMRC · AEOI service), Ireland (Revenue · ROS), Luxembourg (ACD · AEOI_LUX_V3.0), Switzerland (ESTV/AFC · SEI XML), Canada (CRA · Part XVIII & XIX), India (ITD · Form 61B).
Do we need our own digital certificate?
For IDES, yes: a signing certificate from an IRS-approved certificate authority, which is standard for IDES filing. Novus uses it to sign the package, and you upload the package with your own IDES credentials.
Does Novus submit the filing for us?
No. Novus prepares, validates and seals the file; your institution uploads it to IDES or its local tax portal under its own credentials, so you stay in control of every submission.
How do you handle schema updates?
The platform follows every schema change from the IRS and OECD: FATCA XML, CRS XML v3.0 for CRS 2.0, and new frameworks such as CARF and DAC8. No action is needed from you.
Does the AI send our data anywhere?
Local AI validation is part of Novus Desktop (early access 2027). The model runs on your machine with no external calls, so no account-holder data leaves the device.
See the platform on your data. Validated, sealed, ready to file.
A 20-minute demo of the FATCA, CRS and IRS 1099 workflow, including how your data is encrypted and sealed.