--- title: "Trust Center" date: 2026-10-22 author: "meshIQ" featured_image: "https://www.meshiq.com/wp-content/uploads/featured_default.jpg" --- # Trust Center # Trust Center Trust is earned through action, not asserted through words. Customers trust meshIQ with visibility into their most critical systems. This portal explains the security, privacy, compliance and governance program behind that trust, and how to request our documentation. [Start a Security Review](mailto:compliance@meshiq.com?subject=Security%20review%20request)[Contact Compliance Team](mailto:compliance@meshiq.com) 25 yrs governing enterprise middleware and integration traffic 87 named security, privacy, compliance and governance policies, procedures and plans 5 certifications in planning: ISO/IEC 27001, SOC 2, ISO/IEC 27701, SOC 3, ISO/IEC 42001 meshIQ provides enterprise middleware management and observability to some of the world’s most demanding organizations, and now governance for the AI agents that act on that infrastructure. Our customers entrust us with visibility into their most critical systems. Protecting that trust is backed by an enterprise-grade Information Security, Privacy, Compliance and Governance program that spans our people, our processes and our technology. Because our platform sits inside customers’ transaction infrastructure, security is a shared responsibility. This page summarizes the 87 policies, procedures and plans that make up that program. ## meshIQ is accountable for The security of its products and the environments it operates. ## Customers are accountable for Configuration, access management and data handling within their own environments. ## Security. Engineered into every layer of the meshIQ platform and organization. Our Information Security Policy and Cyber Security Policy set the framework for protecting the confidentiality, integrity and availability of customer and company data. Access follows the principle of least privilege, infrastructure is hardened and continuously monitored, security is built into the engineering lifecycle, and resilience plans cover disruption and incident response. ### Governance & ownership The governing framework for protecting the confidentiality, integrity and availability of customer and company data, with clear ownership. - Information Security Policy - Cyber Security Policy - Information Security & Privacy Roles and Responsibilities ### Access control Least-privilege access, with entitlements independently verified through regular access reviews. - Access Control Policy - Principle of Least Privilege Policy - Just-In-Time Privileged Access Policy - Segregation of Duties (SoD) Policy - Multi-Factor Authentication (MFA) Policy - Password Policy - User Access Review Procedure ### Infrastructure & monitoring Hardened, continuously monitored infrastructure, with proactive threat detection, vulnerability management and penetration testing. - Network Security Policy - Server & Infrastructure Security Policy - Hardening Policy - Storage Security Policy - Data Encryption Policy - Secrets Management Policy - Anti-Malware & Endpoint Protection Policy - Monitoring and Logging Policy - Vulnerability Management Policy - Application Penetration Testing Policy - Threat Intelligence Policy ### Endpoint & physical security Corporate and mobile endpoints, physical assets, facilities and media are secured and tracked. - End User Device Policy - Mobile Device Management Policy - Physical Security Policy - Asset Management Policy - Media Protection Policy ### Secure development & change management Code is reviewed, tested and hardened before reaching production, and every infrastructure and application change is formally governed. - Software Development Lifecycle Policy - Secure Development Policy - Software Release & Patch Management Procedure - Change Management Policy ### Resilience & incident response Plans to detect, contain and recover from disruption and security events quickly and transparently. - Business Resilience Policy - Business Continuity Policy - Business Continuity & Disaster Recovery Plan - Business Continuity Plan - Business Impact Analysis (BIA) Procedure - Crisis and Incident Management Plan - Incident Management & Response Policy - Anti-Virus Procedure ## Privacy**.** Safeguarding personal data and the privacy rights of our customers, employees and partners. Personal data is collected, processed, stored and protected in line with applicable global data protection regulations, handled according to its sensitivity, and shared with third parties only under strict controls. As AI becomes part of enterprise technology, dedicated AI policies govern its responsible and transparent use. ### Data protection How personal data is collected, processed, stored, classified, shared with third parties, retained and securely disposed of, in line with applicable global data protection regulations. - Privacy Policy - Data Privacy Policy - Data Privacy & Protection Policy - Information Classification Policy - Data Handling Policy - Third-Party Data Access & Processing Policy - Records Retention Policy ### Responsible AI Responsible and transparent use of artificial intelligence, including AI-specific privacy and risk management. - Artificial Intelligence (AI) Policy - Artificial Intelligence (AI) Privacy Policy - Responsible AI Policy - AIMS Risk Management Procedure ### Digital interactions Terms that govern website use and digital interactions with meshIQ. - Cookie Policy - Site Use Terms and Conditions - General Terms, Conditions and Acceptable Use Policy ## Compliance & Governance**.** Meeting, and anticipating, our legal, regulatory and contractual obligations. Our compliance program establishes accountability for regulatory adherence, including DORA for financial-sector customers, and every team member understands their responsibilities. ### Regulatory adherence Accountability for legal, regulatory and contractual obligations, including digital operational resilience for financial-sector customers under DORA. - Legal and Regulatory Compliance Policy - Compliance Reporting and Audit Policy - DORA Compliance Policy - Compliance with Laws and Internal Investigations Policy - Internal Audit Procedure ### Integrity & ethics Ethical conduct, anti-corruption and anti-fraud controls, fair labor and safety standards, and trade and brand obligations. - Code of Conduct & Ethics Policy - Anti-Corruption Policy - Anti-Fraud Program Policy - Fraud and Unusual or Potentially Suspicious Activity Policy - Fair Wage and Labor Standards Policy - Health & Safety Policy - Statement of Corporate Export and Trade Compliance Policy - Trademark Policy ### Enterprise governance & risk Enterprise risk management, ISMS risk treatment and a regular review cycle for every policy, overseen centrally. - Enterprise Risk Management (ERM) Policy - ISMS Risk Assessment and Risk Treatment Procedure - Control Program & Plan - Policy for Regular Review of Organizational Policies - Policy Management Policy ### Partner ecosystem Our standards extend to suppliers and partners, and customer concerns are addressed fairly and promptly. - Supply Chain Risk Management (SCRM) Policy - Third Party Security Policy - Vendor & Supplier Code of Conduct - Supplier Code of Conduct - Client Dispute Management Procedure ### Our people Every team member understands their responsibilities throughout the employment lifecycle, from background checks to training to exit. - Security Awareness and Training Policy - Training Procedure - IT Acceptable Use Policy - Acceptable Use Policy (AUP) - IT Resources and Communications Systems Policy - HR Security Policy - HR Security & Performance Overview - Employee Handbook - Employee Exit Procedure - Do’s and Don’ts Policy - Background Check Policy - Continuous Improvement Procedure ## AI Governance**.** How meshIQ builds and governs its AI products, including AgentIQ™. ### Certification in planning ISO/IEC 42001, the international standard for AI management systems. ### Responsible AI policies The policies that govern how meshIQ develops and uses AI. - Artificial Intelligence (AI) Policy - Artificial Intelligence (AI) Privacy Policy - Responsible AI Policy - AIMS Risk Management Procedure ### Governance built into execution, not layered on after. AgentIQ™ runs inside an AI agent’s execution path and evaluates every tool call against policy before it executes, resolving each action to allow, confirm, escalate or deny. Personal data is masked before it reaches a model. Every governance decision, including which rule fired and who approved it, is written to a tamper-evident audit trail: Event agent.tool\_call.escalate Policy refund\_amount > 5000 Approver finance.supervisor Illustrative Example Model-agnostic Framework support: LangGraph, OpenAI Agents SDK, CrewAI, AWS Strands, Google ADK Role-based access control ## Certifications**.** meshIQ has engaged an independent auditing firm and requested pricing and timeline proposals for the following certifications and attestations. ![Blue ISO 27001 logo on a black background, with bold lettering between stylized globe arcs; a clean, formal emblem for information security standards.](https://www.meshiq.com/wp-content/uploads/logo_iso27001.png)ISO/IEC 27001 Planning ![Circular AICPA SOC 2 badge with a blue ring reading “Service Organization Control Reports” and a black lower arc reading “Formerly SAS 70 Reports.”](https://www.meshiq.com/wp-content/uploads/logo_aicpa-soc2.png)SOC 2 Planning ![Blue “ISO” lettering and a stylized globe above, with “27701” below on a black background, presenting a bold ISO 27701 certification mark.](https://www.meshiq.com/wp-content/uploads/logo_iso27701.png)ISO/IEC 27701 Planning ![Circular AICPA SOC 3 badge: blue and white ring reads “AICPA Service Organization Control Reports,” with “SOC 3” centered and “Formerly SAS 70 Reports” below; formal certification design.](https://www.meshiq.com/wp-content/uploads/logo_aicpa-soc3.png)SOC 3 Planning ![Blue ISO lettering overlays a stylized wireframe globe, with “42001” beneath on a black background; the clean design feels formal and authoritative.](https://www.meshiq.com/wp-content/uploads/logo_iso42001.png)ISO/IEC 42001 Planning All five certifications are in the planning stage. meshIQ has requested pricing and estimated timelines from its auditing partner, and formal audit engagement has not yet begun. Confirmed timelines will be posted here once the auditor’s proposal is received, and updated as each certification is achieved. ## Documentation Request our policies**.** Featured policies are available on request. Every policy listed on this page can be requested from the compliance team, and certification reports will be added once each audit is complete. [Request all 87 Policies](mailto:compliance@meshiq.com?subject=Policy%20list%20request) ### Popular documents [Information Security Policy](mailto:compliance@meshiq.com?subject=Request%3A%20Information%20Security%20Policy)Security [Access Control Policy](mailto:compliance@meshiq.com?subject=Request%3A%20Access%20Control%20Policy)Security [Incident Management & Response Policy](mailto:compliance@meshiq.com?subject=Request%3A%20Incident%20Management%20%26%20Response%20Policy)Security [Data Privacy & Protection Policy](mailto:compliance@meshiq.com?subject=Request%3A%20Data%20Privacy%20%26%20Protection%20Policy)Privacy [Responsible AI Policy](mailto:compliance@meshiq.com?subject=Request%3A%20Responsible%20AI%20Policy)AI Governance [Business Continuity & Disaster Recovery Plan](mailto:compliance@meshiq.com?subject=Request%3A%20Business%20Continuity%20%26%20Disaster%20Recovery%20Plan)Resilience [DORA Compliance Policy](mailto:compliance@meshiq.com?subject=Request%3A%20DORA%20Compliance%20Policy)Compliance [Supply Chain Risk Management (SCRM) Policy](mailto:compliance@meshiq.com?subject=Request%3A%20Supply%20Chain%20Risk%20Management%20Policy)Vendor ## Portal updates. October 2026 ### Security framework overview updated Aligned this Trust Center with version 1.0 of the meshIQ Security Framework and Trust overview. Every policy area now lists all 87 named policies, procedures and plans. September 2026 ### Auditing partner engaged for certification program meshIQ has engaged an independent auditing firm and requested pricing and estimated timelines for ISO/IEC 27001, SOC 2, ISO/IEC 27701, SOC 3 and ISO/IEC 42001. Confirmed dates will be posted here once the proposal is received. August 2026 ### AI agent governance model published Added the governance model and audit trail approach for AgentIQ (then called AgentGuard), along with AI governance policy references. ## Our commitment. This policy framework reflects meshIQ’s commitment to protecting customer data, operating with integrity and maintaining the resilience our customers depend on. We continue to evolve the program to meet emerging threats and regulatory expectations. For detailed documentation, certification status, or to submit a security or privacy inquiry, contact our compliance team. [Contact Compliance Team](mailto:compliance@meshiq.com)