Governance
How we govern safeguarding day-to-day.
A framework only matters if someone owns it, reviews it, and updates it. This is how that happens at Quiet Space.
Review cadence
The safeguarding rules, blocking-category list, response templates, and UK signposts are reviewed on a rolling six-week cycle. Any change to a blocking category, signpost number, or fail-closed reply is logged.
Clinician-rated knowledge
The knowledge base Iris draws on has a clinician-rating field. Entries touching mental health, safeguarding, or medication carry a review date and a rating from a clinician before they can be surfaced.
Red-team testing
We run adversarial test cases against Iris on every prompt change — role-swap attempts, indirect suicide ideation, medication dosing wrapped in hypotheticals, child-mode adult topics. Regressions block the change from shipping.
Human review SLAs
Critical events (suicide risk, harm to child, abuse disclosure, medical emergency) go to a review queue with a one-hour target. High-severity events have a four-hour target. Every ticket carries the surface, category, scrubbed excerpt, and the reply Iris sent.
Incident response
If a safeguarding rule fails or Iris says something harmful, we treat it as an incident: the specific reply is pulled from live traffic within the hour, a root-cause note is written, and a regression test is added before the fix ships.
Accountability
Quiet Space is operated by Earth Child Project Limited (company number 12597581), registered in England. Safeguarding accountability sits with the company directors. There is a named person on call for critical review-queue tickets outside working hours.
What we don't claim
This page is app-owned content, not an independent audit. We do not claim SOC 2, ISO 27001, or clinical accreditation. Where we say "clinician-rated" we mean an entry has been reviewed by a named clinician on the team — not that Iris itself is a regulated medical device.
Last safeguarding review: 9 July 2026. For data governance, retention, and processing details see the Trust Centre and Privacy Policy.