NovaBoyle Safety

AI in the lab, with people in charge.

NovaBoyle researches, drafts and checks. It does not decide. Every result is a draft until people sign it off, every finding is cited and checked by a separate reviewer, your data stays on your premises, and every sensitive action leaves a record that cannot be quietly changed.

1 · People decide

The AI proposes. Named people approve.

The decisions that matter in a chemical lab are kept for people, and the software is built so they cannot be skipped.

Two-person sign-off

A formulation is approved only when one person requests it and a different person approves it. There is no administrator bypass. Once approved, its composition is locked; a change means a new version.

Safety data sheets stay drafts

NovaBoyle writes a draft SDS. It can only be issued through your own qualified reviewer, named with their qualification and registration number, and approved by a second reviewer. It is never labelled "compliant" or "certified by NovaBoyle".

No risk ratings

Under Malaysia's USECHH Regulations a chemical health risk assessment is made by a DOSH-registered assessor. NovaBoyle hands the assessor the facts it holds and leaves the assessment, and every rating, to them.

Witnessed records

Lab notebook entries are signed and witnessed, and amended rather than overwritten. Projects, research history, formulation versions and lab results cannot be deleted.

2 · Every finding checked

Built to say "I don't know" rather than guess.

In chemistry a confident wrong answer is worse than none, so the research team is held to rules a reviewer can check.

[1]

Cited, or not said

Identifiers, properties, regulatory status and conditions must come from this session's database results. An empty result is reported as "no data found".

QA

A separate reviewer

A verifier agent checks the report against the evidence. Invented references are caught mechanically, not by trust, and a low-confidence review sends the report back for one revision.

∅

Gaps stated, not hidden

Every report has a Data Gaps & Limitations section: sources that failed, properties with no source, single-source claims, lists that were not screened.

≈

Predictions labelled

Model-predicted properties are labelled "prediction, not measurement", and calculations are labelled "calculated, not measured".

=

Arithmetic by calculator

Molar masses, dilutions and limiting reagents are calculated by code, never by the language model. Ambiguous input is refused, not guessed.

!

Honest screening words

A regulatory list that has not been loaded reads "NOT screened", never "not listed". Every dataset shows its date.

3 · Your data

What stays in your building, and what can leave.

By default the AI runs on your own hardware and nothing leaves. A researcher can choose a cloud AI model for one session for higher quality; this table shows exactly what that changes.

DataOn-premises AI (default)Cloud AI (chosen per session)
The research questionStays on premisesSent to the chosen AI provider
Public database resultsStays on premisesSent to the chosen AI provider
Your internal documents, past reports and SDSsSearched on premisesNever sent
Approved formulations, lab results, project memoryStays on premisesNever sent
Stored research recordsYour database onlyYour database only

Your team can run NovaBoyle with no cloud AI at all. Lookups to public chemistry databases are read-only and carry no research data.

4 · Records you can audit

If it happened, it is on the record.

  • Tamper-evident audit trail. Each entry is chained to the one before it with SHA-256, so an edit, deletion or reordering breaks the chain and the check shows where.
  • Who did what, and when. Logins, research runs, the AI model chosen for each session, exports, sign-offs and access changes are recorded.
  • Access by project. People see only the projects they are members of, and the in-app assistant is only given what the person asking may see.
  • A complete dossier. A project exports as one package for a customer or an auditor.
ApprovalsTwo different people, no admin bypass
Issued SDSNamed qualified reviewer + second approver
Audit logAppend-only, hash-chained, verifiable
Research recordsPermanent; corrections are new entries
Cloud AI useOpt-in per session, recorded

5 · How we test it

Measured before every change, not assumed.

Any change to a model or prompt is measured against a fixed set of benchmark research questions before it ships. Most recent full run (25 September 2026, 12 questions):

100%of cited findings traced to a retrieved source
0invented references
12 / 12reports with a Data Gaps section
948automated tests on the current release

A daily health check also tests every public data source through the same code the agents use, so a source that quietly stops returning data is flagged instead of trusted.

6 · Malaysia's AI governance principles

Mapped to the National Guidelines on AI Governance and Ethics.

Malaysia's AIGE guidelines set seven principles for responsible AI. Here is where each one lives in NovaBoyle.

PrincipleIn NovaBoyle
FairnessNovaBoyle makes no decisions about people: it researches chemistry and drafts documents for people to approve.
Reliability, safety & controlGrounding rules, a separate verifier, mechanical citation checks, two-person sign-off, a calculator that refuses rather than guesses.
Privacy & securityOn-premises by default; internal documents and lab data never go to a cloud model; project-level access; login throttling; security headers.
InclusivenessUsable on a phone at the bench; draft SDSs in English, French, Chinese and Korean using officially published hazard phrases only, never machine translation.
TransparencyEvery finding cited; Data Gaps section in every report; predictions labelled; the research plan's reasoning shown; the AI model used for each session shown and recorded.
AccountabilityHash-chained audit trail, permanent records, named reviewers, signed and witnessed notebook entries.
Human benefitPeople make the decisions: approvals, SDS issue and risk assessment stay with qualified people.

Malaysia is preparing an AI governance law. When it is passed, we will publish how NovaBoyle meets it.

7 · Limits, plainly

What NovaBoyle is not.