Trust and security
The standard we expect your vendors to meet, applied to ourselves first.
Boards and CEOs ask about security before anything else, and they should. Here is how BoardAlign handles your information.
No system access
Nothing is installed and nothing is connected to your network, systems or member and customer data. You share documents; we never reach in.
Source files deleted, facts kept
Uploaded documents are read for the facts and figures the readout needs, then the files themselves are deleted on a fixed schedule. The facts, findings and their citations (document, date and page) stay in your institution's account, so each year can be compared with the last.
Director answers stay private
Answers are pooled across the board. No individual answer is ever shown to anyone, including management, and small groups are never broken out.
Your data trains nothing
No client information is used to train any AI model. AI assists with reading documents under a zero-retention arrangement, and a named person reviews every finding.
Every action is recorded
Access by our own reviewers goes through audited functions, so there is a record of who looked at what and when.
Built toward SOC 2
Our controls are tracked in a register designed for a SOC 2 examination from the first release.
Independence
BoardAlign sells no security products, remediation or managed services, and takes no referral fees from vendors. If a conflict ever arises, we disclose it to the board.
Bring your security questions.
We would rather answer them before you start than after.