Data Protection

Irys One is built from the ground up to protect client confidentiality at every layer of the platform.

Zero data retention

Your documents, conversations, and queries are not retained by Irys beyond the active session. When you close a session, the data is purged from our systems. Your data is not used to train, fine-tune, or improve AI models. Your work product remains yours.

End-to-end encryption

All encryption keys are managed through industry-standard key management services and rotated on a regular schedule.

Tenant isolation

Each organization's data is logically isolated from every other organization on the platform. There is no shared data space between tenants. Access controls are designed so that users within an organization see only the Matters, documents, and conversations they have been granted permission to view.

Audit trail

The platform logs relevant production and administrative activity, including:

• User actions — logins, document views, edits, exports, and signature events.
• AI interactions — queries submitted, models used, and responses generated.
• Administrative changes — role assignments, member additions, security policy updates.

Audit logs are exportable as CSV or PDF for compliance reviews, internal investigations, or regulatory reporting.

Ethics alignment

Irys One's data handling practices are designed to align with bar association opinions and ethics guidance on:

• Cloud computing and client data storage.
• Confidentiality obligations when using third-party AI tools.
• Competence requirements for understanding technology used in legal practice.