Privacy policy

The data controller is IRON ID SAS, a simplified joint-stock company registered in Paris, registered office 66 avenue des Champs-Élysées, 75008 Paris, France. Its registration number is provided on request and published here before any first payment.

When you use the platform on behalf of an organization, it is your organization that decides the purposes and means of processing its members' data and its documents; IRON ID then acts as processor, on the terms of the data processing agreement.

This processing is governed by the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi « Informatique et Libertés »), the controller being a French company. The law governing the contract will be stated in the terms of service before any first payment.

No data protection officer is appointed to date; for any question about your data: privacy@iron-id.io.

We collect what the services and the commercial relationship strictly require. The categories are:

• Account data: name, work email address, password hashed with Argon2, multi-factor authentication factors, API keys.
• Organization data: name, country, teams, roles, memberships, invitations.
• Usage and technical data: sign-in timestamps, IP address, device and browser type, the audit log of actions taken.
• Document metadata: name, size, type, versions, fingerprints, timestamps, provenance manifests, audit entries. Document content is covered by clause 4.
• Contact data: what you enter in the request form — name, work address, company, job title, size, industry, country, intent, products of interest, description of your use case.
• Support exchanges: the messages you send us and our replies.

Each category has one purpose and one legal basis, and serves nothing else.

Performance of the contract covers account, organization and document data: without them there is no service. Legitimate interest covers platform security, fraud prevention and product improvement, on usage data reduced to what is necessary. Consent covers the contact form and launch-related messages, revocable in one click. Legal obligation covers accounting, invoicing and requests from competent authorities.

We sell no data, we rent none, and we use neither your documents nor your metadata to train a model.

The content you deposit is encrypted at rest with AES-256-GCM, with a distinct data key per version. Those keys are wrapped by a key management service that never sees the content itself.

Our teams do not access the content of your documents. Isolation between organizations is enforced by the database itself, at row level, in addition to the application filter: a coding mistake is not enough to let a document leave its organization.

Public verification is served by a read-only role that sees only what may be shown: a fingerprint, a date, a verdict. Never the document.

Account and organization data is kept for as long as the organization exists, then for thirty days after termination so you can export, then deleted.

Technical logs are kept for twelve months. Billing data is kept for ten years, the period accounting obligations impose. Requests received through the contact form are kept for three years from the last exchange.

Erasing a document removes its content irreversibly. Its fingerprint, its timestamp and its audit entries remain: they are proof data, and losing them would lose the demonstration that the document existed at a given date. They allow neither reconstruction of the document nor any guess at its nature.

We use a deliberately small number of providers. Those that process personal data today are the following, with what each receives. No customer data is processed until early access opens.

These providers are used during the waitlist phase only and will be replaced by the production infrastructure before the launch on 20 November 2026; the list is updated at that point.

• Vercel Inc. (United States) — hosting of this public website and its forms, and cookieless audience measurement. Receives browsing metadata and the content of submitted forms; no IP address is kept for audience measurement.
• Resend (United States) — sending email: waitlist confirmation, replies, unsubscription. Receives the recipient's address and the content of the message.
• Namecheap Private Email (United States) — the mailbox contact@iron-id.io, which receives the requests sent through the contact form. Receives the content of those requests.

No customer data is processed until early access opens. From 20 November 2026, data of customers in France and the European Union is hosted in France, and data of Egyptian customers in Egypt, as stated below. Elsewhere, hosting in the customer’s country is offered according to demand, and a private deployment on your infrastructure is quoted on request.

Deployment on your own infrastructure, with a hosting partner in your country, or inside an isolated network, is rolling out with early access. We do not claim those options already exist: their status is stated on the security page.

The only processing under way concerns this public website, its forms and the contact mailbox. It involves the providers established in the United States listed in clause 6; the corresponding transfers are governed by those providers' standard contractual clauses. Transfers related to the platform will be described here together with its sub-processors.

• Customers in France and the European Union: data hosted in France. The host is named here before early access opens.
• Customers in Egypt: data hosted in Egypt. Hosted by Huawei Cloud, Egypt region.

You have the following rights over your personal data, exercised at privacy@iron-id.io. We answer within one month.

• Access: confirmation that we process your data, and a copy of it.
• Rectification: correction of inaccurate or incomplete data.
• Erasure: deletion of your data, subject to the proof data and the legal retention obligations described in clause 5.
• Portability: receipt of your data in an open, machine-readable format. The platform offers this directly through export.
• Objection: objection to processing based on our legitimate interest.
• Restriction: a freeze on processing while its accuracy or lawfulness is checked.
• Complaint: referral to the CNIL (Commission nationale de l’informatique et des libertés, the French data protection authority), or to the supervisory authority of the European Union member state where you live, if our answer does not satisfy you.

This site sets one cookie, which remembers the language you chose in the switcher, or the one inferred from your browser on your first visit. Audience measurement runs without a cookie, through Vercel Web Analytics, with no IP address kept and no tracking from one site to another; the data it records is detailed in the cookie policy. There is no advertising tracker and no third-party cookie.

The technical and organizational measures are described control by control on the security page: encryption, identity, authentication, authorization, isolation, audit, key management, infrastructure and data residency.

In the event of a data breach likely to create a risk for the people concerned, we notify the competent authority without undue delay and within the deadline the applicable law imposes, according to the deployment model in place. We inform the people concerned where the risk is high.

The services are addressed to organizations and their members in a professional setting. They are not intended for people under eighteen, and we do not knowingly collect their data.

Any substantial change to this policy is announced by email and on this site at least thirty days before it takes effect, and the update date at the top of the page is refreshed.