Everyone sees the same camera, live, inside the same meeting

An alarm. A vehicle stopped where it should not be. A warning at a plant. The operator can see it on screen. The person who has to decide is in another building, and the manager for that area is out on the street. Today the conversation always starts the same way: someone describes down the phone what is in front of them, and the others decide on a description instead of on an image. With IRIS you open a room from the wall itself and the camera comes into the call: all three look at the same image, at the same instant, while they talk. Nobody has had to open another application, and no other one could have done it: to put that camera inside the call, you have to be the system that is recording it.

Some sites simply cannot let an image out. A prison, a hospital, a piece of critical infrastructure. For them, opening an outside video-call tool and sharing the screen is not a matter of convenience: it is something they are not allowed to do. Their alternative is not another tool: it is not holding the meeting at all. The IRIS meeting calls no external service, neither to connect the room nor to carry audio and video. Everything travels over the same port 443 as the rest of the system, so the network team has nothing new to open in the firewall. And it works just the same at a site with no way out to the internet.

Only the people who need to be in a crisis room get in. Operators join with their own account and the permissions they already have. Whoever is out on the street joins with a link that expires, that counts its own uses and that can be voided at once; that same link decides what they may do: publish their camera, see the wall, write in the chat, or only watch. A room has four roles — host, operator, field and viewer — and anyone who is not a host cannot moderate, however much they tinker with their browser: the refusal comes from the server, not from the screen. Rooms, links, messages and recordings stay isolated per organisation, so a control centre serving several clients never mixes them.

When the meeting ends, it stays. The video stays, with its cryptographic fingerprint proving nobody has altered it, held in the same evidence store as the camera footage and ready to attach to a case. The room log stays, append only and never rewritten: who joined, with which role and with which link, which cameras were being watched at each moment, who muted whom and who closed the room. The chat stays, with what was written and with what the artificial intelligence was asked and answered. And the limits are said out loud: a room takes up to eight people at a time, and the ninth gets a room-is-full message, never a silent failure.

Calling a crisis meeting is usually a separate errand: find the link, paste it into a message, and then explain in writing where to look. Not here. The link to the operations map carries the meeting inside it, and with it whatever the operator has open: the framing of the map, the layers, the cameras they have picked and the incident file. If they have a case open, the same one opens for the other person. The cameras in the link are not copied across: they are requested again with the permissions of whoever opens it, so a shared link never shows anyone something they could not see on their own. And the person who receives it can join in view-only mode: they follow the map and hear the meeting, but they cannot move the map or close it.

You get to know a product by what it does when something is not where it should be. If the system has not been told where to keep recordings, the recorder does not start and says so: it never treats a meeting as recorded when it is not. If a setting it needs in order to run is missing, the service says so instead of starting blind on a made-up value. And while the meeting service is not yet answering, the status screen states exactly that, rather than showing zeros that would look like data. If the recording fails halfway through a meeting, the meeting carries on: the failure is written down, but nobody is left unable to speak. None of this shines in a demo; all of it shows on the day something goes wrong.