Security
How Metropolis IQ approaches access, data protection and responsible operation.
We build Metropolis IQ for organizations that need to understand how their data and users are handled. This page summarizes the controls we can stand behind today.
Access and identity
Access is provisioned by your organization's administrators and controlled through supported identity and account-management mechanisms. People sign in with Google, Microsoft or an MIQ-managed account.
Administrators manage users, roles and sharing. Viewers see only what is shared with them.
Data handling
Sharing is explicit. Work is shared with named people, with either View or View-and-Download access, and there are no anonymous public links by default.
MIQ goes outside its own sources only when you authorize it, and external research is labeled as external research. MIQ Studio does not require a third-party AI subscription or an external AI client.
You review, verify and own the work before it is published. MIQ provides the sources, method and limitations so you can.
Data sources and customer content
Customer data and uploaded content are handled according to the product and the agreement under which the service is provided.
Every figure carries its source and the period it covers, and derived numbers explain how they were derived. Where the evidence does not support a conclusion, MIQ says so rather than guessing.
Vulnerability reporting
If you believe you have found a security issue, use our security contact form and include enough detail for us to reproduce and evaluate it. If you find a potential vulnerability, the form is how the report is routed to the right people.
Security questions and reviews
We can work with your IT and security teams on questionnaires, implementation questions and architecture conversations.
Last reviewed:
Need to involve your IT or security team?
We can include them in the conversation and work through the questions that matter to your organization.