Snapshot 164727
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Trust Center Trust is earned through action, not asserted through words. Customers trust meshIQ with visibility into their most critical systems. This portal explains the security, privacy, compliance and governance program behind that trust, and how to request our documentation. Start a Security Review Contact Compliance Team 25 yrs governing enterprise middleware and integration traffic 87 named security, privacy, compliance and governance policies, procedures and plans 5 certifications in planning: ISO/IEC 27001, SOC 2, ISO/IEC 27701, SOC 3, ISO/IEC 42001 meshIQ provides enterprise middleware management and observability to some of the world’s most demanding organizations, and now governance for the AI agents that act on that infrastructure. Our customers entrust us with visibility into their most critical systems. Protecting that trust is backed by an enterprise-grade Information Security, Privacy, Compliance and Governance program that spans our people, our processes and our technology. Because our platform sits inside customers’ transaction infrastructure, security is a shared responsibility. This page summarizes the 87 policies, procedures and plans that make up that program. meshIQ is accountable for The security of its products and the environments it operates. Customers are accountable for Configuration, access management and data handling within their own environments. Security. Engineered into every layer of the meshIQ platform and organization. Our Information Security Policy and Cyber Security Policy set the framework for protecting the confidentiality, integrity and availability of customer and company data. Access follows the principle of least privilege, infrastructure is hardened and continuously monitored, security is built into the engineering lifecycle, and resilience plans cover disruption and incident response. Governance & ownership The governing framework for protecting the confidentiality, integrity and availability of customer and company data, with clear ownership. Information Security Policy Cyber Security Policy Information Security & Privacy Roles and Responsibilities Access control Least-privilege access, with entitlements independently verified through regular access reviews. Access Control Policy Principle of Least Privilege Policy Just-In-Time Privileged Access Policy Segregation of Duties (SoD) Policy Multi-Factor Authentication (MFA) Policy Password Policy User Access Review Procedure Infrastructure & monitoring Hardened, continuously monitored infrastructure, with proactive threat detection, vulnerability management and penetration testing. Network Security Policy Server & Infrastructure Security Policy Hardening Policy Storage Security Policy Data Encryption Policy Secrets Management Policy Anti-Malware & Endpoint Protection Policy Monitoring and Logging Policy Vulnerability Management Policy Application Penetration Testing Policy Threat Intelligence Policy Endpoint & physical security Corporate and mobile endpoints, physical assets, facilities and media are secured and tracked. End User Device Policy Mobile Device Management Policy Physical Security Policy Asset Management Policy Media Protection Policy Secure development & change management Code is reviewed, tested and hardened before reaching production, and every infrastructure and application change is formally governed. Software Development Lifecycle Policy Secure Development Policy Software Release & Patch Management Procedure Change Management Policy Resilience & incident response Plans to detect, contain and recover from disruption and security events quickly and transparently. Business Resilience Policy Business Continuity Policy Business Continuity & Disaster Recovery Plan Business Continuity Plan Business Impact Analysis (BIA) Procedure Crisis and Incident Management Plan Incident Management & Response Policy Anti-Virus Procedure Privacy. Safeguarding personal data and the privacy rights of our customers, employees and partners. Personal data is collected, processed, stored and protected in line with applicable global data protection regulations, handled according to its sensitivity, and shared with third parties only under strict controls. As AI becomes part of enterprise technology, dedicated AI policies govern its responsible and transparent use. Data protection How personal data is collected, processed, stored, classified, shared with third parties, retained and securely disposed of, in line with applicable global data protection regulations. Privacy Policy Data Privacy Policy Data Privacy & Protection Policy Information Classification Policy Data Handling Policy Third-Party Data Access & Processing Policy Records Retention Policy Responsible AI Responsible and transparent use of artificial intelligence, including AI-specific privacy and risk management. Artificial Intelligence (AI) Policy Artificial Intelligence (AI) Privacy Policy Responsible AI Policy AIMS Risk Management Procedure Digital interactions Terms that govern website use and digital interactions with meshIQ. Cookie Policy Site Use Terms and Conditions General Terms, Conditions and Acceptable Use Policy Compliance & Governance. Meeting, and anticipating, our legal, regulatory and contractual obligations. Our compliance program establishes accountability for regulatory adherence, including DORA for financial-sector customers, and every team member understands their responsibilities. Regulatory adherence Accountability for legal, regulatory and contractual obligations, including digital operational resilience for financial-sector customers under DORA. Legal and Regulatory Compliance Policy Compliance Reporting and Audit Policy DORA Compliance Policy Compliance with Laws and Internal Investigations Policy Internal Audit Procedure Integrity & ethics Ethical conduct, anti-corruption and anti-fraud controls, fair labor and safety standards, and trade and brand obligations. Code of Conduct & Ethics Policy Anti-Corruption Policy Anti-Fraud Program Policy Fraud and Unusual or Potentially Suspicious Activity Policy Fair Wage and Labor Standards Policy Health & Safety Policy Statement of Corporate Export and Trade Compliance Policy Trademark Policy Enterprise governance & risk Enterprise risk management, ISMS risk treatment and a regular review cycle for every policy, overseen centrally. Enterprise Risk Management (ERM) Policy ISMS Risk Assessment and Risk Treatment Procedure Control Program & Plan Policy for Regular Review of Organizational Policies Policy Management Policy Partner ecosystem Our standards extend to suppliers and partners, and customer concerns are addressed fairly and promptly. Supply Chain Risk Management (SCRM) Policy Third Party Security Policy Vendor & Supplier Code of Conduct Supplier Code of Conduct Client Dispute Management Procedure Our people Every team member understands their responsibilities throughout the employment lifecycle, from background checks to training to exit. Security Awareness and Training Policy Training Procedure IT Acceptable Use Policy Acceptable Use Policy (AUP) IT Resources and Communications Systems Policy HR Security Policy HR Security & Performance Overview Employee Handbook Employee Exit Procedure Do’s and Don’ts Policy Background Check Policy Continuous Improvement Procedure AI Governance. How meshIQ builds and governs its AI products, including AgentIQ™. Certification in planning ISO/IEC 42001, the international standard for AI management systems. Responsible AI policies The policies that govern how meshIQ develops and uses AI. Artificial Intelligence (AI) Policy Artificial Intelligence (AI) Privacy Policy Responsible AI Policy AIMS Risk Management Procedure Governance built into execution, not layered on after. AgentIQ™ runs inside an AI agent’s execution path and evaluates every tool call against policy before it executes, resolving each action to allow, confirm, escalate or deny. Personal data is masked before it reaches a model. Every governance decision, including which rule fired and who approved it, is written to a tamper-evident audit trail: Event agent.tool_call.escalate Policy refund_amount > 5000 Approver finance.supervisor Illustrative Example Model-agnostic Framework support: LangGraph, OpenAI Agents SDK, CrewAI, AWS Strands, Google ADK Role-based access control Certifications. meshIQ has engaged an independent auditing firm and requested pricing and timeline proposals for the following certifications and attestations. ISO/IEC 27001 Planning SOC 2 Planning ISO/IEC 27701 Planning SOC 3 Planning ISO/IEC 42001 Planning All five certifications are in the planning stage. meshIQ has requested pricing and estimated timelines from its auditing partner, and formal audit engagement has not yet begun. Confirmed timelines will be posted here once the auditor’s proposal is received, and updated as each certification is achieved. Documentation Request our policies. Featured policies are available on request. Every policy listed on this page can be requested from the compliance team, and certification reports will be added once each audit is complete. Request all 87 Policies Popular documents Information Security Policy Security Access Control Policy Security Incident Management & Response Policy Security Data Privacy & Protection Policy Privacy Responsible AI Policy AI Governance Business Continuity & Disaster Recovery Plan Resilience DORA Compliance Policy Compliance Supply Chain Risk Management (SCRM) Policy Vendor Portal updates. October 2026 Security framework overview updated Aligned this Trust Center with version 1.0 of the meshIQ Security Framework and Trust overview. Every policy area now lists all 87 named policies, procedures and plans. September 2026 Auditing partner engaged for certification program meshIQ has engaged an independent auditing firm and requested pricing and estimated timelines for ISO/IEC 27001, SOC 2, ISO/IEC 27701, SOC 3 and ISO/IEC 42001. Confirmed dates will be posted here once the proposal is received. August 2026 AI agent governance model published Added the governance model and audit trail approach for AgentIQ (then called AgentGuard), along with AI governance policy references. Our commitment. This policy framework reflects meshIQ’s commitment to protecting customer data, operating with integrity and maintaining the resilience our customers depend on. We continue to evolve the program to meet emerging threats and regulatory expectations. For detailed documentation, certification status, or to submit a security or privacy inquiry, contact our compliance team. Contact Compliance Team Cookies preferences ✕ Others Other uncategorized cookies are those that are being analyzed and have not been classified into a category as yet. Necessary Necessary Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously. Advertisement Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads. Analytics Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc. Functional Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features. Performance Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors. We value your privacy This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies.