Data storage & infrastructure
All organisation and user data within the BoardPro platform is securely stored in Microsoft Azure data centre facilities. BoardPro's primary infrastructure is hosted in New South Wales, Australia, with backup replication to Victoria, Australia. This encompasses all backup strategies, snapshots, and database replicas maintained to safeguard your data.
BoardPro benefits from the robust control environment upheld by Microsoft Azure, evidenced through certifications including SSAE-16 SOC 1, 2 and 3, and ISO 27001.
Learn more about Microsoft Azure security · Physical security at Azure data centres
Data security & replication
BoardPro’s servers are hosted on Microsoft Azure's enterprise-grade data centres located in Australia. They employ robust physical security controls, with 24/7/365 monitoring and surveillance, on-site security staff and regular ongoing security audits.
BoardPro maintains multiple geographically separated data replicas and hosting environments to minimise the risk of data loss or outages.
BoardPro performs real-time data replication between these protected facilities, transmitted across encrypted links.
End-to-end data encryption
All data that goes between you and BoardPro is encrypted using industry-standard TLS (Transport Layer Security), encrypting your governance data end-to-end.
All data is also encrypted at rest when stored on our servers, and also encrypted when transferred between data centres for backup and replication.
Authentication
Multi-factor authentication protects your user logins with an extra layer of security. To login to BoardPro, along with your email and password you'll also get a unique time based code.
Our authentication systems are continuously updated to ensure adherence to latest security standards.
Each person creates their own password in accordance with password complexity requirements. Login attempts are limited to prevent brute force attacks.
User access levels
You control who gets access to your organisation, and you can add and revoke people whenever you need.
With permission levels designed for boards, you can assign different access levels for your administrators, board members and management.
Sensitive documents can be kept in folders accessible by board members.
