Data Processing Addendum

Last updated: 19 September 2026

This summary will be replaced with a signed DPA for organisation customers.

BoardVault acts as a processor of customer board materials for organisation (entity) workspaces. Customers are controllers of those materials. When a director creates a personal workspace, they are the controller of that workspace and of their own notes, annotations, action history and decision log.

Organisation papers remain the organisation’s. Ending a directorship revokes access to the organisation’s documents while the director’s own layer is retained for their record-keeping.

Sub-processors may include the hosting provider, object storage, transactional email, and — only if the organisation enables them — an identity provider and an AI inference provider. A signed DPA is available for enterprise customers.