Minimise collection
Request only information needed for the agreed diagnostic question.Separate evidence types
Different handling considerations may apply to:- stakeholder interview content;
- screen observation;
- uploaded operational data;
- exported reports;
- client documents.
Access
Use the minimum access required for each participant and delivery role. Remove access when the engagement no longer requires it.Sensitive information
Before collecting personal, confidential or regulated data, confirm necessity and the client’s approved handling process.Current platform baseline
The secure Iris environment is hosted on Microsoft Azure, with the current secure deployment in UK South. Prescient Labs has Cyber Essentials Plus.Exact retention, deletion, backup, subprocessor and package-specific residency wording is [PRODUCT DETAIL TO CONFIRM] and must be confirmed before external contractual use.