Legal

Privacy Policy

How BoardDesk handles the personal and board information entrusted to it — for directors, secretaries and counsel of the institutions we serve.

This is an interim summary. The binding document is being drawn up with counsel ahead of the first institutional rollout and will be published here in full before general availability.

What we hold

Board membership and roles, the papers and minutes uploaded to your board, declared conflicts of interest, and the audit trail of who did what and when. We hold this to run the board, not to profile anyone.

Where it lives

Data is stored in a European region and isolated per board by row-level security, so one institution cannot see another's papers. Sign-in links expire after ten minutes, and passwords are held only as one-way hashes.

Who processes it for us

Supabase holds the database, the uploaded files and sign-in, in Frankfurt. Vercel runs the application, also in Frankfurt. Resend sends the sign-in and invitation emails, from its Ireland region. The AI assistant is switched off, so no board material is sent to an AI service.

Who can see it

Only members of a board can see that board's material, and officer actions are gated to officers. Eagle Tech Solutions accesses data only to operate and support the service.

Back to sign in

BoardDesk · Eagle Tech Solutions · Mogadishu