Your assistant sees what you let it see.Three states, per project.
The first thing a buyer asks now is what the AI does with their customers' data. This is the answer, and it is a setting you control rather than a sentence in a contract.
The data policy, project by project.Not per account. Per project.
Personal data in the clear
The assistant reads your audience the same way you do.
Personal data redacted
Identity fields arrive redacted. Aggregates keep working, so it can still segment, analyse and recommend.
Nothing from this project
The assistant has no access to that project's data at all.
What redacted actually means.It restricts the model, not you.
- Identity fields
- Name, surname, phone and the rest of the contact's identity columns reach the assistant marked as redacted when the policy calls for it.
- Your export is untouched
- This limits what the model reads. It does not limit what you can take out of the platform: your CSV export is exactly what it was.
- Aggregates survive
- Counts, segments and behaviour stay readable, which is what the assistant needs to be useful. Redaction removes the identity, not the analysis.
Why a switch and not a clause.One is verifiable. The other is a sentence.
Per project
An agency can keep one client's data in the clear and block another's without opening two accounts or trusting a policy document.
You can see the state
It is a setting in the project, with three values. Anyone with access can check which one is on, today, without asking us.
It changes when you change it
You do not raise a ticket to restrict what the assistant reads on an account, and you do not wait for a release.
Ahead of what is about to be required.
The EU AI Act is turning transparency about the use of AI from good practice into an obligation. The per-project data policy was not built to comply with it — it exists because an agency running twelve brands cannot give the same access to all twelve — but it arrives ready.
And it never sends on its own: Iris builds it, you approve it.
The part that decides the rest.
Who you may write to, what stops with an opt-out and what has to arrive anyway.
The consent model