Insider Risk.
A DIGITAL ANALYST FOR
Built for operators, rather than analysts - and backed by 40 years' of physical-security operating experience and 20 years' in security & screening systems.
It detects and makes sense of security and operational data to reduce loss, incidents and compliance gaps across complex facilities — before they occur.
- HOW IT WORKS
.png)
BUILT FOR PRIVACY.
Designed for trust.
No surveillance
Iveron analyses patterns across your existing operational data — no new monitoring devices, cameras or tracking. Zero new data collection from employees.
Performance risk only
Only operational signals are detected: access events, shift patterns, policy-linked data. No personal, medical, or protected attributes.
Human decision always
Iveron never makes autonomous decisions. Every alert requires qualified human review before any action. Supports GDPR Article 22 compliance.
Automation concentrates where volume is highest Detection, Triage, Containment and Closure, the phases that touch every alert, run 70-95% automated.
Human judgement concentrates where accountability must sit Evaluation and Correction stay human-led, because forming a conclusion about a person's performance and executing the consequence are not decisions Iveron is designed to make.
The blend, not a flat ratio ~75% of total case volume resolves inside the automated front end; the ~25% human share concentrates in the minority of cases that reach full investigation and escalation.
Iveron vs Human Effort
ICTS is no stranger to handling personal data in regulated environments. TravelDoc, an identity travel management system, has securely processed the personal and biometric data of tens of millions of passengers and airside staff across regulated aviation environments in multiple jurisdictions.
These systems operate under GDPR, national aviation security law, and airport data governance frameworks. Iveron inherits this proven privacy architecture — the same encrypted access controls and audit infrastructure that ICTS has operated for over a decade without a single data breach or regulatory sanction.
15+ Years
PII STEWARDSHIP
50M+ PAX
Pax processed
0 Breaches
of notifiable Data*
0 Sanctions
from regulators*
*notifiable personal data breaches in 10+ years of TravelDoc operations
**across ICTS TravelDoc deployments
Iveron includes a dedicated PII Anonymiser that one-way hashes all personally identifiable information at the end of ingestion. Raw identity data never enters the detection layer — it is held exclusively in an AES-256 encrypted vault with access granted only to the client. Iveron and ICTS hold zero access to vault contents. Investigators work with anonymised risk profiles only; identity is revealed solely through a client-controlled de-anonymisation workflow with immutable audit trail.
-
One-way hash at ingestion
-
Client-only encrypted vault
-
Zero vendor PII access
-
Immutable de-anon audit trail
90d
max retention
0
special category data
100%
human review
0
vendor pIi access
15+ years of ICTS PII Stewardship — proven at scale
gdpr compliant
Employee Rights Response Process
Data Minimisation by Default
Full Audit Trail
Configurable Retention <90 days
Role-Based Access Controls
DPIA Framework Ready
LIA Completed
What Iveron processes - and what it does not
Legitimate Interests (Art. 6(1)(f))
Three-part LIA test passed: purpose (critical infrastructure), necessity (no less intrusive alternative) and balancing with employee rights.
DPIA Framework Pre-Prepared
Full Data Protection Impact Assessment template provided. DPO sign-off pathway and annual review schedule built in from day one.
Employee Transparency Notice
Template covers legal basis, data categories, retention periods and all employee rights including Art. 21 right to object
Standard Operating Procedure
Documented access controls, alert thresholds, investigation protocols and escalation paths — configurable per deployment.
Legal basis and architecture
PII Anonymiser — Built-in identity protection
- PRIVACY & COMPLIANCE
Hashed at ingestion
All PII one-way hashed before the detection layer sees it
Client-only vault
AES-256 encrypted identity store — zero vendor access.
Full audit trail
Immutable record of every de-anonymisation and access event.
.png)
Human always decides
Every alert requires qualified review. Supports GDPR Article 22 compliance.
Iveron ingests data from your existing systems. A built-in anonymiser keeps identities out of the detection layer, and the architecture is designed to support GDPR compliance — just the pattern, made visible.
of the facility operation.
MAKING SENSE
- WHY IVERON
Six principles that separate an intelligence platform from another dashboard — each one grounded in four decades of operating reality.
FROM REACTIVE COMPLIANCE
to proactive detection
40 YEARS,
OPERATOR-GRADE
Built on four decades of physical-security operating experience across aviation and critical infrastructure — not lab theory.
OPERATIONS
FOCUSED
Designed for the people running the facility, not the people writing reports about it. Every surface is an operational surface.
PATTERN
LED
Cross-correlated across data domains. The signal lives in the relationship between events, never in a single event.
CATCH ISSUES
EARLY
Predictive by design — Iveron surfaces deviation before it becomes an incident, so response moves from forensic to pre-emptive.
PRIVACY
FIRST
Built around a privacy-first anonymiser and regulatory-aware architecture. No surveillance posture, no invasive defaults.
RULE-ENGINE
EXPERTISE
Experience-backed rule engine, continuously refined by operators on the ground. Your playbook, made computable.
Your current tools tell you what happened yesterday.
Iveron tells you what's going to happen tomorrow.
CONTINUOUS
INTELLIGENT
PREDICTIVE