Security
How BoardVault protects board materials.
Board papers are sensitive by nature. BoardVault is designed so the right people see the right packs—and so your organisation can show who accessed what when it matters.
Access that matches your board
You control who is in each workspace. Permissions follow roles in your organisation, and committee papers stay scoped to the committees they belong to. One customer’s data is never mixed with another’s.
Keeping papers private
- Connections to BoardVault use modern encryption—the same kind you expect from online banking.
- Documents are stored privately and securely.
- Administrators control downloads and can add watermarks to PDFs when needed.
Sign-in and accountability
- You can require an extra verification step at sign-in (for example a code sent by email).
- Passkey sign-in is on our roadmap for when it is fully ready in the product.
- Sensitive actions leave a permanent audit trail—useful for governance reviews and “who saw this before the meeting?” questions.
- If someone should no longer have access, sessions can be ended on the server side. That is the practical equivalent of revoking access even when packs have been downloaded.
AI and your papers
When AI is enabled, answers come only from your organisation’s own papers. BoardVault does not use customer content to train general-purpose models. Where cloud AI is configured, we use in-region processing and provider agreements that do not retain your data for model training.
Certifications
SOC 2 Type II and ISO 27001 are goals we are working toward on a defined timeline—they are not certifications we claim for this build today. If your organisation is likely to move to a dedicated cloud environment within the next twelve months, we recommend running any formal observation period on that target architecture.