
Trust Center
Trust is an operating system.
Security, privacy, ethics, resilience, and responsible technology practices come together here—so customers can see how IRIS approaches the obligations behind the work.
Trust by design
Controls matter when they shape daily decisions.
IRIS approaches trust as a living management discipline: understand risk, assign ownership, implement safeguards, retain evidence, learn from events, and improve the system.
This center provides a clear public view. Detailed due-diligence material may be shared through a controlled customer process where appropriate.

Trust architecture
The disciplines behind dependable partnership.
The same principles inform our internal governance and the solutions, services, and transformation programs we deliver.
Information-security management
A risk-based management system connects policy, ownership, controls, evidence, review, and continual improvement across IRIS operations.
Privacy & data protection
Personal data is handled according to defined purposes, access controls, lifecycle practices, security safeguards, and applicable legal obligations.
Responsible AI & digital trust
AI use should be secure, explainable to the right audience, governed by human accountability, and appropriate to the business and risk context.
Supplier & third-party governance
Technology and service dependencies are considered through due diligence, contractual expectations, access control, risk, and ongoing ownership.
Resilience & incident management
Preparedness covers escalation, coordination, continuity, recovery, lessons learned, and improvement—not response activity alone.
Ethics & speak-up culture
Our Code of Ethics sets expectations for integrity, conflicts, confidentiality, fairness, professional conduct, and raising concerns.
Policies & commitments
Read the public trust record.
Information Security
How IRIS approaches risk, control, ownership, and continual improvement.
Read commitment →PUBLICPrivacy
How personal data is handled and how privacy questions can be raised.
Read commitment →PUBLICResponsible Disclosure
A safe, responsible channel for reporting potential security issues.
Read commitment →PUBLICCode of Ethics
The principles that guide professional conduct and accountable decisions.
Read commitment →PUBLICTerms of Use
The terms that govern use of the IRIS website and its content.
Read commitment →PUBLICCustomer Success
How IRIS governs delivery, confidentiality, acceptance, and outcomes.
Read commitment →Customer due diligence
Need more detail for an active evaluation?
Certification information and relevant assurance material can be coordinated through a controlled process aligned to the opportunity, confidentiality requirements, and legitimate business need.
Talk to IRIS
Build the relationship on visible accountability.
Bring us the objective, the constraint, or the problem. We will bring the right regional specialists into the conversation.