NSV 2FA

NSV AUTH is a two-factor authentication app designed for secure VPN access management in a corporate environment, specifically for use within a single company. The app is not intended for general public use and operates exclusively for employees of one organization to manage access to internal corporate resources and VPN services.

Features:

TOTP code generation compatible with all standard authenticators

Instant push notifications for VPN login requests.

One-tap approve or deny for login attempts

QR code scanning for quick account setup

Manual account entry support

Secure local storage of credentials

NSV AUTH keeps your network access secure by requiring a second factor for every VPN login. When someone attempts to connect, you receive an instant push notification to approve or deny the request directly from your phone.

The app is intended for internal corporate use only and does not provide any public‑facing services or user registrations. Access to the VPN is controlled by the company’s internal authentication and authorization systems, and the app acts as a secure second‑factor authenticator for employee‑owned devices.

For App Review purposes, the following information is provided:

VPN Functionality Details (per App Review requirements):

What user information is the app collecting using VPN? The app does not collect any user traffic data, browsing history, IP addresses, device identifiers, or personal information through the VPN connection. The VPN functionality is limited solely to establishing a secure channel for receiving and responding to two-factor authentication (2FA) requests (approve/deny). No network traffic from the user's device is routed through the VPN except for these minimal 2FA signals. Credentials (e.g., TOTP secrets) are stored and processed locally on the device only.

For what purposes are you collecting this information? The minimal 2FA request data (login attempt notifications and user approval/deny responses) is collected exclusively to enable secure, real-time approval of VPN login attempts by corporate employees. This acts as the second factor in the company's internal authentication system, preventing unauthorized access to corporate VPN resources. There are no other planned uses—no analytics, advertising, profiling, or data retention beyond the immediate 2FA transaction. All processing happens transiently during login events.

Will the data be shared with any third parties? No, the data is not shared with any third parties. 2FA responses are transmitted solely to the company's private internal backend server (self-hosted, on-premises authentication gateway) for verification against corporate access policies. This backend does not store any data from the app—requests are processed ephemerally and discarded after authentication. No external servers, cloud providers, or third-party services receive this information. Push notifications use only Apple's APNs for delivery, with no additional data sharing.

The app does not offer in‑app purchases, subscriptions, or user‑generated content.

The app relies on the company’s internal VPN gateway and authentication backend, as well as Apple Push Notification service (APNs) for delivering VPN login requests to users’ devices.

The app functions identically across all regions; there are no regional differences in features or content.

The app is used exclusively by employees of a specific company and is not available to third parties or the general public.

Test credentials and access to the app’s main features are restricted to authorized company employees; the app cannot be meaningfully tested outside of the company’s internal network and VPN infrastructure. For App Review, a screen recording demonstrating the app’s core functionality (launching the app, adding an account via QR code or manual entry, generating TOTP codes, simulating 2FA approval via VPN channel) has been provided separately.