Trust & security

Your data stays yours. In Europe.

IRIS is built and run in Europe, hosted and processed in the EU under GDPR. Your store data calibrates your model and nobody else's. It is never resold, never used to train someone else's model without your permission, and always yours to export. Independent means exactly that: no broker parent looking over your shoulder, and no bought US location panel anywhere in the pipeline.

Hosted and processed in the EU Your data stays yours, with full export Independent, no US mobile panel GDPR-compliant

The commitments

What we commit to, in writing

None of this is a reassurance you have to take on faith. Each one is a contractual term you can hold us to, and we will show you the clause.

Residency

Hosted and processed in the EU

IRIS runs on European infrastructure. Your data is stored and processed in the EU, not shipped to a US data centre to be analysed.

Ownership

Your data calibrates your model, and only yours

Your store performance builds and calibrates your own models. It is never resold, and it trains a model for anyone else only if you opt in to collective learning.

Portability

Full export, no lock-in

Everything IRIS holds for you, your data and your outputs, is exportable through the platform and the API. Nothing is trapped inside.

Independence

No US mobile panel, no broker owner

IRIS is independent. There is no bought US location panel in the pipeline and no parent broker with an interest in your data. The signals underneath are open, European, and auditable.

Private by construction

The assistant never sees your raw data

The built-in assistant is private by construction: it works through IRIS's own tools and only ever sees the result of a query, a score, a forecast, an impact summary, never your underlying store, customer or transaction records. Sensitive data is never handed to a language model. Your data team can still drive IRIS from their own agents over the API and MCP, on your terms.

More for your data team

Ask us

The paperwork your security and legal teams will ask for

The DPA, DPIA, LIA and the data-ownership clause are on file. You do not have to chase them: email info@irisplatform.nl with what you need and it is yours to review before you commit to anything. No demo first.

Send this page to your security team

We will answer their questions directly, in plain language, and put anything they need in writing. Book a demo, or ask us for the DPA, DPIA, LIA and data-ownership clause.