Trust Center
Trust is earned through action, not asserted through words.
25 yrs
governing enterprise middleware and integration traffic
87
named security, privacy, compliance and governance policies, procedures and plans
5
certifications in planning: ISO/IEC 27001, SOC 2, ISO/IEC 27701, SOC 3, ISO/IEC 42001
meshIQ provides enterprise middleware management and observability to some of the world’s most demanding organizations, and now governance for the AI agents that act on that infrastructure. Our customers entrust us with visibility into their most critical systems. Protecting that trust is backed by an enterprise-grade Information Security, Privacy, Compliance and Governance program that spans our people, our processes and our technology.
Because our platform sits inside customers’ transaction infrastructure, security is a shared responsibility. This page summarizes the 87 policies, procedures and plans that make up that program.
meshIQ is accountable for
The security of its products and the environments it operates.
Customers are accountable for
Configuration, access management and data handling within their own environments.
Security.
Engineered into every layer of the meshIQ platform and organization. Our Information Security Policy and Cyber Security Policy set the framework for protecting the confidentiality, integrity and availability of customer and company data. Access follows the principle of least privilege, infrastructure is hardened and continuously monitored, security is built into the engineering lifecycle, and resilience plans cover disruption and incident response.
Governance & ownership
The governing framework for protecting the confidentiality, integrity and availability of customer and company data, with clear ownership.
- Information Security Policy
- Cyber Security Policy
- Information Security & Privacy Roles and Responsibilities
Access control
Least-privilege access, with entitlements independently verified through regular access reviews.
- Access Control Policy
- Principle of Least Privilege Policy
- Just-In-Time Privileged Access Policy
- Segregation of Duties (SoD) Policy
- Multi-Factor Authentication (MFA) Policy
- Password Policy
- User Access Review Procedure
Infrastructure & monitoring
Hardened, continuously monitored infrastructure, with proactive threat detection, vulnerability management and penetration testing.
- Network Security Policy
- Server & Infrastructure Security Policy
- Hardening Policy
- Storage Security Policy
- Data Encryption Policy
- Secrets Management Policy
- Anti-Malware & Endpoint Protection Policy
- Monitoring and Logging Policy
- Vulnerability Management Policy
- Application Penetration Testing Policy
- Threat Intelligence Policy
Endpoint & physical security
Corporate and mobile endpoints, physical assets, facilities and media are secured and tracked.
- End User Device Policy
- Mobile Device Management Policy
- Physical Security Policy
- Asset Management Policy
- Media Protection Policy
Secure development & change management
Code is reviewed, tested and hardened before reaching production, and every infrastructure and application change is formally governed.
- Software Development Lifecycle Policy
- Secure Development Policy
- Software Release & Patch Management Procedure
- Change Management Policy
Resilience & incident response
Plans to detect, contain and recover from disruption and security events quickly and transparently.
- Business Resilience Policy
- Business Continuity Policy
- Business Continuity & Disaster Recovery Plan
- Business Continuity Plan
- Business Impact Analysis (BIA) Procedure
- Crisis and Incident Management Plan
- Incident Management & Response Policy
- Anti-Virus Procedure
Privacy.
Safeguarding personal data and the privacy rights of our customers, employees and partners. Personal data is collected, processed, stored and protected in line with applicable global data protection regulations, handled according to its sensitivity, and shared with third parties only under strict controls. As AI becomes part of enterprise technology, dedicated AI policies govern its responsible and transparent use.
Data protection
How personal data is collected, processed, stored, classified, shared with third parties, retained and securely disposed of, in line with applicable global data protection regulations.
- Privacy Policy
- Data Privacy Policy
- Data Privacy & Protection Policy
- Information Classification Policy
- Data Handling Policy
- Third-Party Data Access & Processing Policy
- Records Retention Policy
Responsible AI
Responsible and transparent use of artificial intelligence, including AI-specific privacy and risk management.
- Artificial Intelligence (AI) Policy
- Artificial Intelligence (AI) Privacy Policy
- Responsible AI Policy
- AIMS Risk Management Procedure
Digital interactions
Terms that govern website use and digital interactions with meshIQ.
- Cookie Policy
- Site Use Terms and Conditions
- General Terms, Conditions and Acceptable Use Policy
Compliance & Governance.
Meeting, and anticipating, our legal, regulatory and contractual obligations. Our compliance program establishes accountability for regulatory adherence, including DORA for financial-sector customers, and every team member understands their responsibilities.
Regulatory adherence
Accountability for legal, regulatory and contractual obligations, including digital operational resilience for financial-sector customers under DORA.
- Legal and Regulatory Compliance Policy
- Compliance Reporting and Audit Policy
- DORA Compliance Policy
- Compliance with Laws and Internal Investigations Policy
- Internal Audit Procedure
Integrity & ethics
Ethical conduct, anti-corruption and anti-fraud controls, fair labor and safety standards, and trade and brand obligations.
- Code of Conduct & Ethics Policy
- Anti-Corruption Policy
- Anti-Fraud Program Policy
- Fraud and Unusual or Potentially Suspicious Activity Policy
- Fair Wage and Labor Standards Policy
- Health & Safety Policy
- Statement of Corporate Export and Trade Compliance Policy
- Trademark Policy
Enterprise governance & risk
Enterprise risk management, ISMS risk treatment and a regular review cycle for every policy, overseen centrally.
- Enterprise Risk Management (ERM) Policy
- ISMS Risk Assessment and Risk Treatment Procedure
- Control Program & Plan
- Policy for Regular Review of Organizational Policies
- Policy Management Policy
Partner ecosystem
Our standards extend to suppliers and partners, and customer concerns are addressed fairly and promptly.
- Supply Chain Risk Management (SCRM) Policy
- Third Party Security Policy
- Vendor & Supplier Code of Conduct
- Supplier Code of Conduct
- Client Dispute Management Procedure
Our people
Every team member understands their responsibilities throughout the employment lifecycle, from background checks to training to exit.
- Security Awareness and Training Policy
- Training Procedure
- IT Acceptable Use Policy
- Acceptable Use Policy (AUP)
- IT Resources and Communications Systems Policy
- HR Security Policy
- HR Security & Performance Overview
- Employee Handbook
- Employee Exit Procedure
- Do’s and Don’ts Policy
- Background Check Policy
- Continuous Improvement Procedure
AI Governance.
How meshIQ builds and governs its AI products, including AgentIQ™.
Certification in planning
ISO/IEC 42001, the international standard for AI management systems.
Responsible AI policies
The policies that govern how meshIQ develops and uses AI.
- Artificial Intelligence (AI) Policy
- Artificial Intelligence (AI) Privacy Policy
- Responsible AI Policy
- AIMS Risk Management Procedure
Governance built into execution, not layered on after.
AgentIQ™ runs inside an AI agent’s execution path and evaluates every tool call against policy before it executes, resolving each action to allow, confirm, escalate or deny. Personal data is masked before it reaches a model. Every governance decision, including which rule fired and who approved it, is written to a tamper-evident audit trail:
Event
agent.tool_call.escalate
Policy
refund_amount > 5000
Approver
finance.supervisor
Illustrative Example
Model-agnostic
Framework support: LangGraph, OpenAI Agents SDK, CrewAI, AWS Strands, Google ADK
Role-based access control
Certifications.
meshIQ has engaged an independent auditing firm and requested pricing and timeline proposals for the following certifications and attestations.
ISO/IEC 27001
Planning
SOC 2
Planning
ISO/IEC 27701
Planning
SOC 3
Planning
ISO/IEC 42001
Planning
All five certifications are in the planning stage. meshIQ has requested pricing and estimated timelines from its auditing partner, and formal audit engagement has not yet begun. Confirmed timelines will be posted here once the auditor’s proposal is received, and updated as each certification is achieved.
Documentation
Request our policies.
Popular documents
Portal updates.
October 2026
Security framework overview updated
Aligned this Trust Center with version 1.0 of the meshIQ Security Framework and Trust overview. Every policy area now lists all 87 named policies, procedures and plans.
September 2026
Auditing partner engaged for certification program
meshIQ has engaged an independent auditing firm and requested pricing and estimated timelines for ISO/IEC 27001, SOC 2, ISO/IEC 27701, SOC 3 and ISO/IEC 42001. Confirmed dates will be posted here once the proposal is received.
August 2026
AI agent governance model published
Added the governance model and audit trail approach for AgentIQ (then called AgentGuard), along with AI governance policy references.
Our commitment.
This policy framework reflects meshIQ’s commitment to protecting customer data, operating with integrity and maintaining the resilience our customers depend on. We continue to evolve the program to meet emerging threats and regulatory expectations.
For detailed documentation, certification status, or to submit a security or privacy inquiry, contact our compliance team.