Security & Privacy Brief

High-level client-facing guidance on responsible use of Iris during a consulting diagnostic.

Iris supports evidence-led consulting diagnostics through stakeholder interviews and consent-based screen observation.

Current baseline

Prescient Labs hosts Iris on Microsoft Azure in the UK and has achieved Cyber Essentials Plus.

Participant evidence

Participants should understand why they are being invited and how their input contributes to the diagnostic. Screen observation is consent-based and is used only where it adds relevant task-level evidence.

Data minimisation

The consulting team should collect only the evidence needed to answer the agreed diagnostic question. Sensitive or unrelated information should not be collected simply because it is available.

Human validation

Iris supports analysis; consultants remain responsible for validating findings and applying professional judgment before recommendations are presented.

For formal security review, use the current Prescient Labs security documentation.