Your assistant sees what you let it see.Three states, per project.

Iris data policyBy project
  • Online store

    Your own brand

    NormalAnonymisedBlocked
  • Agency client

    Managed by you, owned by them

    NormalAnonymisedBlocked
  • Health clinic

    Sensitive data

    NormalAnonymisedBlocked

The data policy,
project by project.

Normal

Personal data in the clear

The assistant reads your audience the same way you do.

Anonymised

Personal data redacted

Identity fields arrive redacted. Aggregates keep working, so it can still segment, analyse and recommend.

Blocked

Nothing from this project

The assistant has no access to that project's data at all.

What redacted
actually means.

Identity fields
Name, surname, phone and the rest of the contact's identity columns reach the assistant marked as redacted when the policy calls for it.
Your export is untouched
This limits what the model reads. It does not limit what you can take out of the platform: your CSV export is exactly what it was.
Aggregates survive
Counts, segments and behaviour stay readable, which is what the assistant needs to be useful. Redaction removes the identity, not the analysis.

Why a switch and
not a clause.

Per project

An agency can keep one client's data in the clear and block another's without opening two accounts or trusting a policy document.

You can see the state

It is a setting in the project, with three values. Anyone with access can check which one is on, today, without asking us.

It changes when you change it

You do not raise a ticket to restrict what the assistant reads on an account, and you do not wait for a release.

Ahead of what is
about to be required.

The EU AI Act is turning transparency about the use of AI from good practice into an obligation. The per-project data policy was not built to comply with it — it exists because an agency running twelve brands cannot give the same access to all twelve — but it arrives ready.

And it never sends on its own: Iris builds it, you approve it.

Decide what Iris sees.
Then ask it anything.

  • Summarise last month's campaign results
  • Describe my audience: countries, channels and consent
  • Draft the welcome series and let me review it