Prototyping Software Resources

Miro publishes its core certifications and reports via the Trust Center: • AI management: ISO/IEC 42001 Artificial Intelligence Management System (AIMS). • Information security: ISO/IEC 27001 Information Security Management System (ISMS). • SOC reports: SOC 2 Type II and SOC 3 reports available under NDA or direct download where applicable. • Privacy & regulations: GDPR and CCPA commitments, plus additional frameworks such as IRAP and Microsoft SSPA. You can request or download the latest attestations and whitepapers directly from the Miro Trust Center. 🔗Learn More: https://miro.com/ai-trust/ https://help.miro.com/hc/en-us/articles/360012346599-Miro-security-and-compliance-FAQ https://trust.miro.com/

Here's some additional context that may be helpful •Data encryption: TLS 1.2+ (including TLS 1.3) in transit and 256-bit AES encryption at rest in production environments. •External sharing policies: Admins can set trusted domains, disable public links, control link access, and use domain control so only users from approved domains can join. • Guest & member controls: You can manage roles and board access so guests have only the minimum access needed. • AI access control: Miro AI is available only to members, not guests or visitors, and admins can further control which teams can use Miro AI features. 📚 Where this is documented You’ll find the details in the Miro security & compliance FAQ and the Miro AI Admin security article. 🔗 Learn More: https://help.miro.com/hc/en-us/articles/360012346599-Miro-security-and-compliance-FAQ https://help.miro.com/hc/en-us/articles/11277533556626-Miro-AI-Admin-security

Yes, Miro is used in regulated environments and Enterprise Guard adds an advanced governance layer on top of standard workspace permissions. 📊 Core Enterprise Guard capabilities Data discovery & classification: Automatically discovers and classifies sensitive data (PII, PHI, PCI and more) across boards so you can apply policies based on sensitivity. Legal hold & eDiscovery: Legal Holds, Content Logs, and Board Export plus eDiscovery APIs help preserve, track, and export board data to support investigations and regulatory workflows. Lifecycle controls: Retention, Trash Policy, and Disposition policies automate how long boards are kept and when they are archived or deleted, with full audit trails. Security stack integrations: Enterprise Guard integrates with security and compliance tooling (including Microsoft Purview DSPM for AI) so AI prompts and responses can be monitored alongside other systems. 🔗 Learn More: https://help.miro.com/hc/en-us/articles/15699815402514-Enterprise-Guard-introduction https://help.miro.com/hc/en-us/articles/30943405198994-AI-Trust-Capabilities-and-FAQ https://help.miro.com/hc/en-us/articles/28617278171154-Enterprise-Guard-and-Microsoft-Purview-DSPM-for-AI-Integration-Overview