Privacy & data protection at Iron Mountain

Iron Mountain is committed to privacy and data protection.

We value and protect the privacy of the customers, partners and other stakeholders we engage with when conducting business. We build trust by ensuring that privacy safeguards and security controls are embedded in our products and services.

Privacy is integral to our business

We conduct our business and develop services with privacy and security in mind. We collect limited personal data and use it only for legitimate business purposes. Our Privacy Notice informs about our commitments and privacy practices. We may also process personal data on behalf of our customers, as necessary to provide our services, and in-line with our contractual terms and conditions. Our Data Processing Agreement sets out our responsibilities and our Data Privacy Solution Briefs provide additional information.

When we engage service providers and disclose personal data to them, we take steps to ensure this is compliant with applicable laws and regulations, and as relevant, contractual terms and conditions we have with customers. Our Supplier Data Processing Agreement sets out responsibilities of our service providers.