Legal Changelog: November 2026
SHARED RESPONSIBILITY MODELS
November 2026 changes
Summary
To bring greater clarity to our Customers and Partners, we have published two shared responsibility models. They set out who is responsible for what across Cloud Drive Mapper (CDM) and IAM Cloud-hosted services, including Iris and Bifrost (the API). No existing agreements or policies have changed.
Changes
- New document setting out the responsibilities of IAM Cloud and the Customer across 16 areas, including Customer endpoints and VDI, the Microsoft 365 tenant, Microsoft Entra authentication, Iris administration, network connectivity, support, backup and recovery, and security incident response.
- Defines the Customer as including any third party the Customer authorises to manage, administer, support or operate the Product or the Customer’s computing environment on its behalf.
Partner Shared Responsibility Model
- New document setting out the responsibilities of IAM Cloud, the Partner and the Customer where a Customer buys through an IAM Cloud Partner, across 12 areas, including Partner authority, Central Command and Iris administration, Partner access to Customer tenancies, support, and the end of Partner authority.
- Partner responsibilities depend on the services agreed between the Partner and the Customer. Where the Partner does not perform an activity, the Customer retains that responsibility.