[DRAFT — pending legal counsel review] This is a plain-language summary, not the binding legal text. The full Privacy Notice is being finalised with legal counsel and is available on request.
Legal
Privacy summary
How IRIS, operated by MeshWorks Wireless Oy (Finland), handles personal data — in plain language.
Last updated: [PLACEHOLDER]
What data we process
- Account data — the email, name, and workspace details of the people who administer an IRIS workspace.
- Alert metadata — the content, severity, routing, and acknowledgement history of alerts you send, used to drive escalation and to produce the audit trail.
- Recipient phone numbers — the contact details of the people you alert. For this data we act as a processor on behalf of you, the tenant; you remain the controller.
Controller vs processor
For your account data, MeshWorks Wireless Oy is the controller. For the recipient data and alert content you push into the platform, you are the controller and IRIS is your processor under a Data Processing Addendum. See the DPA summary.
EU data residency
IRIS runs on Cloudflare’s EU edge, with state pinned to EU jurisdiction. Data residency is a property of the architecture, not a configuration toggle. Our current subprocessors are listed on the subprocessors page.
Your GDPR rights
Subject to the conditions in the GDPR, individuals can exercise rights including:
Access (Art. 15)
A copy of the personal data we hold.
Erasure (Art. 17)
Deletion of personal data, where applicable.
Rectification
Correction of inaccurate data.
Opt-out
STOP/START keyword handling on SMS, in 6 languages.
Where IRIS acts as a processor, requests from individuals are routed to you (the controller); we assist as required under the DPA.
IRIS does not carry out automated decision-making or profiling that produces legal or similarly significant effects (GDPR Art. 22).
Retention
Alert and audit records are retained for a configurable period to support compliance reporting, then deleted. The default and any tenant-specific retention windows are described in the full Privacy Notice and DPA.
Analytics & cookies
This website uses privacy-friendly, cookieless analytics (Cloudflare Web Analytics) and only essential cookies. See the cookie policy.
Making a privacy request
Email privacy@meshworks.fi with your request. The full Privacy Notice, including legal bases and international-transfer detail, is available on request.