# BoardX — full site content > BoardX is an AI-powered governance, risk and compliance (GRC) platform for regulated organisations. It brings board meetings, policy, risk and compliance into one platform, with Private IQ answering questions from the board's own records. BoardX is headquartered in Dublin, Ireland, and hosts customer data in the EU. Generated 2026-10-12 from the published pages. Cite the canonical URL given for each page. --- # BoardX | AI-powered GRC and board software, built in Europe > Board meetings, Private IQ, and compliance and risk in one AI platform for regulated organisations. Built in Dublin, with customer data hosted in the EU. Canonical URL: https://www.boardx.io/ EUROPEAN BY DESIGN BoardX is an Irish company, not subject to the US CLOUD Act or the Foreign Intelligence Surveillance Act (FISA). Read why it matters → Built in Europe for regulated organisations # AI-powered GRC, built into every board decision. Bring governance, risk, compliance and policy into one AI platform. Cut the manual work and give your board the full picture behind every decision. See how it connects THE PAPER WAS FINALISED ON 9 SEPTEMBERThe risk moved on the 18th. Your board should know. One platform. **Three clear outcomes.** 01 Save time. Packs, meetings and minutes in one place. 02 See risks clearly. The live risk position in every paper. 03 Stay protected. Informed decisions, on record, in Europe. The problem we solve ## The board’s job is to make strategic decisions within a risk framework. Most tools keep the two apart. The board pack sits in a portal. The risk register sits in a spreadsheet. Policies sit in a shared drive. By the time someone stitches them together, the position has moved. BoardX keeps them in one system, so every paper carries the risk, compliance and policy context that belongs to it. RISK Risk register Inherent, residual and target risk, with owners and actions COMPLIANCE Obligations & controls Frameworks, controls and assessment results. Agentic completion with human oversight. POLICY Policy library Owners, approvals and review dates THE BOARD PACK Every paper shows the position as it is today Directors read the proposal with the risks, controls and policies that relate to it. - Paper 4 · Lending growth **RISK 14 ↑** - Paper 6 · Outsourcing renewal **2 CONTROLS DUE** - Paper 7 · Conduct policy review **OWNER CHANGED** DECIDE Decision register What was decided, on what evidence, with conditions FOLLOW THROUGH Actions & owners Tracked to the next meeting and back into the risk picture Illustrative example · fictional data. One system of record, so nothing is re-keyed between the register, the pack and the minutes. Built for regulated organisations ## Enterprise-grade governance, sized for your organisation. BoardX is built for organisations that answer to a regulator, a membership or the public. Most boards are up and running within weeks. ### Financial services Show your regulator informed oversight of conduct, operational and third-party risk. Central Bank FCA PRA CPC 2025 DORA EU AI Act Fitness & Probity ### Housing associations & AHBs Evidence the governance and viability standards your regulator expects. AHBRA standards RSH Governance & Viability ### Charities & non-profits Run a well-governed board with a small team and a clear record. Charities Governance Code GDPR One platform ## Four connected products. One record. Available today 01 · BOARD ### Board meetings Agendas, board packs, AI Minutes, decisions and actions. Explore Board → Available today 02 · RISK ### Risk management A live risk register and heat map, linked to the papers it affects. Explore Risk → Available today 03 · POLICY ### Policy management One policy workspace with owners, approvals and review dates. Explore Policy → Available today 04 · COMPLIANCE ### Compliance Frameworks, master controls and assessments mapped to your entities. Explore Compliance → Private IQ · institutional memory ## Your board’s knowledge. No longer buried in the archive. Every indexed paper, policy, minute and risk adds context. Private IQ helps directors use that recorded knowledge before the next decision. Ask why a decision was made. Compare what changed between reports. Follow the answer back to its source. Come to the meeting ready to question the recommendation, not reconstruct its history. Follow the source. Read the supporting record in context. See the gaps. Know what is recorded and what still needs asking. Keep the judgement. Your board challenges, weighs and decides. How Private IQ works Board papers. Minutes. Recorded decisions. Your indexed sources, connected through Private IQ. Visualisation: NASA’s Goddard Space Flight Center / J. Schnittman & B. P. Powell Board portals manage documents. BoardX manages governance. Meetings, risk, policy and compliance, connected and answerable. European by design ## A European company. Not subject to US surveillance law. BoardX is headquartered in Dublin and has no US parent company or US private equity control. US-controlled board portals can be ordered to hand over customer data under the US CLOUD Act and FISA Section 702, wherever that data is stored. BoardX is not a US company, so those orders do not apply to us. For boards handling strategy, member data and regulatory matters, who controls the vendor matters as much as where the servers sit. How we protect your data - Question to ask your vendor — US-controlled vendor — BoardX - Where is the company controlled from? — United States — Ireland (EU) - Can it be compelled under the CLOUD Act? — Yes, even for data held in the EU — No. Not a US company - Is it subject to FISA Section 702? — Yes, as a US provider — No. Not a US company - Which law governs your contract? — Often US law — Irish law Our infrastructure partner and every sub-processor are listed in the BoardX sovereignty brief, available on request. This page is general information, not legal advice. --- # Board meeting software: packs, minutes and actions | BoardX > Agendas, board packs, meetings, minutes, decisions and actions in one place, with the live risk position built into every paper. Canonical URL: https://www.boardx.io/board Board meetings # Less time on the pack. More time on the decision. Agendas, board packs, meetings, minutes, decisions and actions in one place, with the live risk position built into every paper. Available today Save admin time and director time. Your team builds and republishes the pack in minutes. Directors get through it quickly and arrive with better questions. The full board cycle ## One meeting, one record, start to finish. BEFORE ### Prepare - **Agenda builder** Build the agenda from your annual work plan and attach the papers. - **IntelliPack** Summaries, linked risks and an immersive heat map for every paper. - **Private IQ** Ask about earlier decisions and get the source, highlighted. DURING ### Discuss - **Follow the agenda** The paper, its risks and its policies side by side. - **AI Minutes** Audio and video stream straight into your own database. Pause for off-the-record moments. - **Speech to text** Ask questions and take notes by voice. AFTER ### Follow through - **Draft minutes for review** Your team edits, the board approves. Recordings can be permanently deleted. - **Decision register** Decisions, conditions and evidence recorded once. - **Actions and owners** Tracked to the next meeting and linked back to the risk. BEFORE THE MEETINGDirectors arrive prepared, with the risk picture in front of them. IN THE MEETINGThe discussion moves to the decision, not the paperwork. AFTER THE MEETINGThe record is drafted, reviewed and approved in one place. What makes it different ## The board pack shows the risk as it is today. Board papers are finalised days before the meeting. Risks move in the meantime. In BoardX, each paper is linked to the risks, controls and policies it relates to, so directors see the current position, not a snapshot. - 01 **Linked risks in every paper** Risk owners keep the register current; the pack reflects it. - 02 **Registers that stay current** Conflicts, skills matrix and succession planning in the same place. Available today ### AI Minutes A draft record from the meeting itself, ready for your company secretary to review. Available today ### Private IQ Your board’s institutional memory, answerable by text or voice. Explore Private IQ → Waitlist ### Director’s Brief The changes, earlier decisions and open questions each director needs, brought to them. See the roadmap → 2 hrs → 30 min Typical minutes drafting time with AI Minutes, reviewed by your team Minutes To republish a board pack after a late paper or change Weeks For most boards to be fully up and running --- # Private IQ: AI answers from your board's records | BoardX > Ask by text or voice. Private IQ answers from your own minutes, papers, policies and risk register, and shows you the exact source. Canonical URL: https://www.boardx.io/private-iq Private IQ # Your board’s memory, answerable and traceable. Ask a question by text or voice. Private IQ answers from your own minutes, papers, policies and risk register, and shows you the exact source. Available today No answer without a source. Private IQ opens the original document with the relevant text highlighted, within the limits of your role. Private IQ · institutional memory ## Your board’s knowledge. No longer buried in the archive. Every indexed paper, policy, minute and risk adds context. Private IQ helps directors use that recorded knowledge before the next decision. Ask why a decision was made. Compare what changed between reports. Follow the answer back to its source. Come to the meeting ready to question the recommendation, not reconstruct its history. Follow the source. Read the supporting record in context. See the gaps. Know what is recorded and what still needs asking. Keep the judgement. Your board challenges, weighs and decides. Board papers. Minutes. Recorded decisions. Your indexed sources, connected through Private IQ. How it works ## Three steps. No training needed. - 01 **Your records, indexed** Minutes, board papers, policies and the risk register, read by their structure, page by page. - 02 **Ask in plain language** Type or speak. Start from suggested questions a good director would ask. - 03 **Check the source** Every answer links to the page and highlights the text it came from, and says what the record doesn’t cover. Try it ## One record. Different questions. Illustrative examples using fictional documents. Private IQ Illustrative “Why did we choose a pilot before a wider rollout?” The board approved a six-month pilot to assess service quality and cost first, and asked management to return with an evaluation. JUNE BOARD MINUTES · PAGE 4 “ The board approved a six-month pilot. Management will evaluate service quality and cost before a wider rollout is considered. ” **What the record doesn’t establish:** The September paper recommends expansion but does not include the pilot evaluation. Built for board-level trust ## Safer than pasting board papers into a public chatbot. Directors are already using consumer AI tools for board work. Private IQ gives them a governed alternative inside the platform they already use. ### Sources highlighted The exact text, not just a page number. ### Permissions respected Answers only draw on what your role can see. ### Redactions respected If it’s redacted for you in the pack, Private IQ can’t show it either. ### Your data, your database Each customer has its own database. Your records are not used to train AI models. See BoardX in action ## Ask Private IQ a question from your own board. We’ll index a sample of your papers so you can test answers against records you know. --- # Compliance, risk and policy management software | BoardX > Frameworks, controls, risk registers and policies in one AI platform, with employee attestations and agentic completion under human oversight. Canonical URL: https://www.boardx.io/risk-and-compliance Compliance & Risk # Keep your organisation compliant and moving forward faster. Fly through compliance work with the leading AI-driven GRC platform, so you never have to ask, “Are we compliant with the regulations that apply to us?” See how it works ## It’s time to simplify, speed up and transform your compliance. With obligations, controls, policies and risks in one BoardX workspace, your organisation can see its compliance position in one place, keep every policy and control current, and give the board and the regulator clear evidence of oversight. No more chasing spreadsheets before every committee meeting. See the compliance workspace ## AI is here to help you get there faster. BoardX’s AI GRC agents take on the heavy lifting: scanning for regulatory change, mapping new obligations to your policies and controls, finding the gaps and chasing the evidence. Your team reviews and approves, and spends its time on the judgement calls that keep your organisation safe. Every agent output cites its source and stays a draft until a named person approves it. Meet the compliance agents Regulatory change · Central Bank update Illustrative - **ALERT** New consumer protection guidance publishedHorizon scanning · relevance 92 / 100 for your entity - **MAPPED** 3 obligations drafted, each anchored to its clauseLinked to Lending policy and 2 master controls - **GAP** Complaints-handling policy does not cover the new timelineQuoted text from both documents · fix drafted Compliance officer review Approve · Edit · Reject How BoardX AI works ## Three engines behind every assessment. ### Document indexing engine Reads documents the way a compliance professional does - Indexed by structure: sections, clauses and pages - Each clause read with its definitions and cross-references - Every judgement cites the clause and page ### Calibrated decision layer Knows when it is sure, and when it isn’t - Each criterion judged with a confidence score - Scores measured against expert review - Low confidence goes straight to a named reviewer - Fast and efficient enough to run continuously ### Compliance harness Memory and skills around your system of record - Obligation, control and evidence model built in - Separate memory for each customer - Assessment skills codified from expert method - Full audit trail, built for EU data sovereignty Risk management ## From a risk register to a board-level conversation. - 01 **Immersive risk heat map** Inherent, residual and target risk, against appetite. - 02 **Actions, controls and response plans** Every risk has an owner, a control set and a plan. - 03 **Linked to the papers** When a risk moves, every paper it relates to shows it. Policy management ## The policy library. Not another folder to chase. - 01 **One central workspace** Every policy, its current version and its history. - 02 **Owners, approvers and review dates** Reminders before a review falls due, with board approval on record. - 03 **Status at a glance** Dashboards across all policies, ready for the committee pack. - 04 **Employee portal** Get employee attestations, with AI search across every policy. Compliance ## Your obligations, controls and evidence in one system of record. Import your frameworks, map master controls to every entity and run assessments on a set frequency. Results roll up into the board and committee packs. Available today STEP 1 ### Authority frameworks Regulations and standards, with citations. Available today STEP 2 ### Roles and evidence Owners, accountability and linked policies. Available today STEP 3 ### Master controls Mapped to frameworks and entities, with a frequency. Available today STEP 4 ### Assess and monitor Control assessments, scores and remediation. Compliance agents ## Agents on the compliance system you already run. Not a new product to adopt. Six agents work inside your BoardX frameworks, controls and assessment cycles, and their results reach the board. Six compliance agents - **Horizon scanning** AI-summarised alerts from named Irish, UK and EU regulator sources, scored for relevance to each entity. - **Impact and obligation mapping** Regulatory updates become draft obligations, each anchored to its clause and linked to policies and owners. - **Policy and control management** Proposes controls, owners and entity links, with policy redlines when obligations change. - **Gap analysis** Finds gaps in policies, processes or controls against new rules, quoting both texts. - **Continuous control and risk monitoring** Pre-fills control assessments, chases evidence and reopens controls when a rule changes. - **Marketing compliance** Checks campaigns, rate advertising and fundraising appeals against the rules before they go live. Where BoardX goes further ### Higher accuracy Private IQ’s page index anchors every output to its clause, and filters out rules that don’t apply before extraction. ### Board-level assurance Agent outputs roll up into board and committee packs. Compliance tools usually stop at the compliance team. ### Already the system of record Agents write into the frameworks, controls and assessment cycles you already run in BoardX. Every output is a draft until a named person approves it. Regulatory coverage ## Frameworks ready to load into BoardX. Import the regulations and standards your organisation answers to, then map them to your policies, controls and risks. ### Financial services Central Bank Regulations FCA PRA DORA ### Housing AHBRA Regulator of Social Housing ### Charities & public bodies Charities Governance Code Health Service Executive ### Security, data & AI ISO 27001 NIS2 GDPR EU AI Act NIST AI RMF Cyber Essentials See BoardX in action ## See risk and compliance inside the board pack. Bring one live risk and one policy. We’ll show you how they reach the board. --- # BoardX AI Labs: agentic AI for governance and compliance > AI agents that prepare, monitor, connect and escalate across board, risk, policy and compliance records. Directors keep approval and accountability. Canonical URL: https://www.boardx.io/agents BoardX Agents # AI that does the governance work. People make the decisions. Agents that prepare, monitor, connect and escalate across your board, risk, policy and compliance records. Directors keep approval and accountability. Waitlist By invitation: BoardX AI Labs. We build our next AI capabilities alongside a small, selected group of customers. If you have an AI project in governance, risk or compliance, talk to us about joining. Compliance agents ## From a regulator’s update to an owned obligation. Compliance agents work inside the frameworks, controls and assessment cycles you already run in BoardX, and their results reach the board pack. [See them in the compliance product →](https://www.boardx.io/risk-and-compliance#compliance) Six compliance agents - **Horizon scanning** AI-summarised alerts from named Irish, UK and EU regulator sources, scored for relevance to each entity. - **Impact and obligation mapping** Regulatory updates become draft obligations, each anchored to its clause and linked to policies and owners. - **Policy and control management** Proposes controls, owners and entity links, with policy redlines when obligations change. - **Gap analysis** Finds gaps in policies, processes or controls against new rules, quoting both texts. - **Continuous control and risk monitoring** Pre-fills control assessments, chases evidence and reopens controls when a rule changes. - **Marketing compliance** Checks campaigns, rate advertising and fundraising appeals against the rules before they go live. Where BoardX goes further ### Higher accuracy Private IQ’s page index anchors every output to its clause, and filters out rules that don’t apply before extraction. ### Board-level assurance Agent outputs roll up into board and committee packs. Compliance tools usually stop at the compliance team. ### Already the system of record Agents write into the frameworks, controls and assessment cycles you already run in BoardX. Every output is a draft until a named person approves it. Our principles ## Agentic, not autonomous. ### Maker-checker Every agent output is a draft until a named person approves it. ### Anchored to the source Every output cites the page or clause it came from. ### Fully logged Model, sources and reviewer recorded for every run. ### Built for EU sovereignty Designed to run on open-weight models in a private EU workspace. See BoardX in action ## Shape BoardX Agents as a design partner. We are working with a small number of regulated organisations. Tell us about your governance cycle and we’ll show you where agents fit. --- # Security and EU data sovereignty | BoardX > BoardX is an Irish company with no US parent. Where your board's data is hosted, how it is protected, and what the CLOUD Act and FISA mean for you. Canonical URL: https://www.boardx.io/trust Trust, security and sovereignty # Your board’s most sensitive work, with a European vendor. BoardX is an Irish company with no US parent. Here is what that means for your data, and how we protect it. Ask every vendor one question. “Can a foreign government order you to hand over our board papers?” For US-controlled vendors, the answer is yes. European by design ## A European company. Not subject to US surveillance law. BoardX is headquartered in Dublin and has no US parent company or US private equity control. US-controlled board portals can be ordered to hand over customer data under the US CLOUD Act and FISA Section 702, wherever that data is stored. BoardX is not a US company, so those orders do not apply to us. For boards handling strategy, member data and regulatory matters, who controls the vendor matters as much as where the servers sit. - Question to ask your vendor — US-controlled vendor — BoardX - Where is the company controlled from? — United States — Ireland (EU) - Can it be compelled under the CLOUD Act? — Yes, even for data held in the EU — No. Not a US company - Is it subject to FISA Section 702? — Yes, as a US provider — No. Not a US company - Which law governs your contract? — Often US law — Irish law Our infrastructure partner and every sub-processor are listed in the BoardX sovereignty brief, available on request. This page is general information, not legal advice. Security ## Security built into the platform, not added on. ### Secure infrastructure Microsoft Azure infrastructure operating to ISO 27001, CIS and GDPR standards. ### A database for every customer Your records are held separately from every other customer’s. ### Two-factor authentication Standard for every user. Single sign-on is coming soon. ### Role-based access Permissions and pack redactions carry through to every AI answer. ### Recordings under your control Meeting audio and video stream into your own database. Pause for off-the-record moments and permanently delete when the minutes are approved. ### No training on your data Your board’s records are not used to train AI models. Questions boards ask us ## CLOUD Act, FISA and where your data lives. ### What is the US CLOUD Act? A 2018 US law that lets US authorities order US-controlled technology companies to hand over data they hold or control, even when that data is stored outside the United States, including in the EU. ### What is FISA Section 702? A US surveillance law that allows US intelligence agencies to require US electronic communication service providers to assist in collecting the communications of non-US persons outside the United States. ### Why doesn’t this apply to BoardX? Both laws are aimed at companies under US jurisdiction. BoardX is incorporated and headquartered in Ireland, with no US parent company, and is not a US provider for the purposes of these laws. ### Where is my data hosted? BoardX runs on Microsoft Azure data centres in the EU, with a separate database for each customer. Our sovereignty brief sets out our infrastructure partner, every sub-processor and how your data is protected at each layer. ### Does BoardX use my data to train AI? No. Your board’s records are used only to answer your organisation’s questions. ### Is this legal advice? No. This page is general information. We recommend your counsel review our sovereignty brief and data processing agreement. See BoardX in action ## Request the BoardX sovereignty brief. Our infrastructure, sub-processors and data protection controls, ready for your DPO, counsel or risk committee. --- # About BoardX | Governance software from Dublin, Ireland > BoardX helps regulated organisations embed AI responsibly into compliance, risk and board oversight. Headquartered in Dublin, Ireland. Canonical URL: https://www.boardx.io/company Our mission # We help regulated organisations embed AI responsibly into compliance, risk and board oversight. Compliance has become harder to run. Regulation changes constantly, supervisors expect more, and the work is still spread across spreadsheets, shared drives and email. That fragmentation is a risk in itself. At the same time, AI is arriving in everyday work faster than governance can keep up. Traditional compliance tools were not built to show the oversight and accountability regulators now expect, and they stop at the compliance team. BoardX closes that gap. AI built for compliance and risk works inside the frameworks, controls and policies you already run. Every output cites its source and stays a draft until a named person approves it, and the results reach the board pack, so oversight is visible all the way up. “Compliance needs AI built for regulation, with people accountable for every decision.”The BoardX approach ## Governance that moves organisations forward. BoardX brings meetings, policy, compliance and risk together, with intelligence and automation supporting the people responsible for oversight. ## Built around how people work Traditional compliance is fragmented, manual and hard to sustain. BoardX combines governance experience with technology to connect the work, clarify accountability and support better decisions. ## Our approach - Innovation across compliance and security. - Experienced people delivering dependable, insight-led solutions. - Purpose-driven products shaped around real customer needs. - Customers at the centre of how we build and improve. ## People, planet and purpose BoardX’s approach to sustainability and social governance centres on empowered teams, efficient technology and responsible decision-making. We aim to support transparency, accountability and continuous improvement—both in our own work and in the organisations using BoardX. Explore Compliance & Risk → --- # Contact BoardX | Book a demo > Book a demo, get support or explore a partnership. Contact the BoardX sales, customer support and partnerships teams. Canonical URL: https://www.boardx.io/contact Contact BoardX # Get in touch. Whether you’re looking for a demo, need support or want to explore a partnership, our team is here to help. ## Sales See how BoardX can support your organisation. [sales@boardx.io](mailto:sales@boardx.io) ## Customer support For help with BoardX or an existing account. [support@boardx.io](mailto:support@boardx.io) ## Partnerships & integrations For collaboration, integration and business development enquiries. [partners@boardx.io](mailto:partners@boardx.io) ## Press & media [marketing@boardx.io](mailto:marketing@boardx.io) --- # Customer stories | BoardX > Leaders at Women's Aid, Badminton Ireland, Cooperation Ireland, Active Disability Ireland and TFI Local Link Wexford on running their boards with BoardX. Canonical URL: https://www.boardx.io/case-studies Customer Stories # The people behind better board meetings. Hear directly from the leaders and governance teams using BoardX. Their experiences, in their own words. Watch the stories Customer Stories ## Hear it from the people using BoardX. Active Disability Ireland ### A national charity, governed in one place Brenda O’Donnell · CEO Badminton Ireland ### A 125-year-old Olympic sport, run on BoardX Enda Lynch · CEO Co-operation Ireland ### Cross-border peace-building Ian Jeffers · Chief Executive Women’s Aid ### Supporting women C Lynch · Business Support Manager & Company Secretary TFI Local Link Wexford ### Connecting rural communities Mary B. O’Leary · General Manager People at the centre ## See BoardX in your boardroom. Bring your current process and your questions. We will show you how BoardX supports the people preparing the papers, making decisions and following up afterwards. A question for your next board meeting ## What does the board need to understand—not just read? Start with the decision, the earlier record and the evidence still missing. Explore practical prompts for a more focused discussion. Read our board preparation guide → Let’s talk ## Bring your questions. Meet the team and see where BoardX fits your organisation. --- # Connected governance platform | BoardX > Bring meetings, policy and compliance, and risk management into one connected workspace. Add intelligence to help directors prepare with context and focus on… Canonical URL: https://www.boardx.io/platform The BoardX platform # Connected governance. Clearer oversight. Bring meetings, policy and compliance, and risk management into one connected workspace. Add intelligence to help directors prepare with context and focus on what matters. Explore more The BoardX platform ## One platform. Three connected areas. 0 1 ### Board meetings Prepare agendas and board packs, record minutes and follow actions through the meeting cycle. Explore board meetings → 0 2 ### Policy & compliance Organise policies, connect evidence to requirements and keep reviews moving. Explore policy & compliance → 0 3 ### Risk management Keep the risk register, ownership and reporting together for a clearer board-level picture. Explore risk management → AI governance ## AI adoption needs board-level oversight. The AI Governance Workspace brings the organisation’s AI systems, risks and controls into view. Give directors a structured basis for examining how AI is being used, where exposure sits and what oversight is needed. AI oversight workspace ## Know what is in use. See what needs attention. ### AI system register Maintain a central inventory of the AI systems used across your organisation. ### Risk assessments Examine bias, hallucinations, data exposure and other AI-related risks. ### Incident management Record and investigate AI failures and unexpected outcomes. ### Policies & controls Connect responsible-use policies with operational controls. ### Oversight dashboard Bring usage, risk and control information into the board discussion. ### Compliance evidence Organise the records supporting your AI governance approach. Explore the intelligence layer: [Private IQ](https://www.boardx.io/#private-iq) · [AI Minutes](https://www.boardx.io/#ai-minutes) · [Director’s Brief — in development](https://www.boardx.io/#brief) A question for your next board meeting ## What does the board need to understand—not just read? Start with the decision, the earlier record and the evidence still missing. Explore practical prompts for a more focused discussion. Read our board preparation guide → Let’s talk ## Bring your questions. Meet the team and see where BoardX fits your organisation. --- # Compliance automation software | BoardX > Bring frameworks, controls, evidence and accountability together. BoardX helps your team replace fragmented compliance work with a clear, repeatable process… Canonical URL: https://www.boardx.io/for-compliance/compliance-automation Compliance automation · control & clarity # Less chasing evidence. More confidence in the record. Bring frameworks, controls, evidence and accountability together. BoardX helps your team replace fragmented compliance work with a clear, repeatable process — and gives the board a better view of progress. See the workflow FROM THE TEAM TO THE BOARDOne connected record. A clearer compliance picture. 01 / Framework library ## Multiple frameworks. No need to start over. Map controls across more than one framework and reuse the work behind them. Keep regulatory requirements and internal standards together instead of maintaining a separate process for each. Start with a template Choose from the framework library to structure the requirements relevant to your organisation. Make it your own Build an internal framework and map the controls that matter to your team. Frameworks include FCA, PRA, Central Bank regulations, the Charities Governance Code, DORA, NIS2, ISO 27001, HSE, AHBRA, the Regulator of Social Housing, GDPR, the EU AI Act, NIST AI RMF and Cyber Essentials. BoardX framework library Evidence recommendations within BoardX 02 / Evidence management ## Know what to collect. Keep it where it belongs. Evidence recommendations help your team identify the material that supports a control. A central repository keeps that material available when it is time to review, assess or report. - Suggestions based on the control type. - A structured upload and validation workflow. - A shared evidence repository for audit access. Your team reviews the evidence and decides whether it demonstrates the control. Recommendations support that judgement; they do not replace it. 03 / Guided workflow ## From requirements to review. A path your team can follow. Turn a complex compliance programme into an owned sequence of work, with progress visible along the way. - 01Choose your frameworkStart with a relevant standard or build your own internal framework. - 02Assign responsibilityDefine roles and make ownership of the work clear. - 03Map the controlsConnect controls across frameworks to reduce duplicate work. - 04Gather the evidenceUse recommendations and a central repository to support each control. - 05Review and reportTrack progress, assess performance and bring the gaps into view. Guided setup and progress tracking in BoardX Policy Management ## A policy library. An active governance process. Create, manage and govern organisational policies in one workspace. Search and categorisation help people find the right document, while workflows keep drafting, review and approval on track. 0 1 ### Draft & collaborate Use AI-assisted drafting and templates, with authors and reviewers contributing to the document. 0 2 ### Control the lifecycle Move from draft through review, approval, publication and attestation. Retain version history and track changes. 0 3 ### Communicate & attest Give employees access to relevant approved policies and keep a record of acknowledgements, outstanding reviews and exceptions. Draft → Review → Approve → Publish → Attest → Retire AI Compliance ## Know how AI is being used. Give the board a clearer view. The AI Oversight Workspace provides a structured view of AI adoption across the organisation. Bring the inventory, risk assessments, policies and controls together to support responsible use and board-level oversight. 0 1 ### Inventory & assessment Maintain an AI system register and assess risks including bias, hallucinations and data exposure. 0 2 ### Incidents & controls Record failures and unexpected outcomes. Connect governance policies with the controls and responsibilities behind them. 0 3 ### Evidence for oversight Give directors visibility into AI usage and risk. Organise evidence supporting the organisation’s approach to AI obligations. Supports your governance process; it does not replace legal assessment or guarantee regulatory compliance. Information Security ## Controls, evidence and assurance. In the same conversation. Bring security leaders, governance teams and the board around a connected record. Translate security requirements and risk priorities into owned controls, supporting evidence and a clearer account of progress. 0 1 ### Framework-led work Organise work around ISO 27001, DORA, UK GDPR and operational resilience requirements relevant to your organisation. 0 2 ### From assessment to delivery Connect maturity assessments and assurance needs with practical control activity and the evidence supporting it. 0 3 ### Board-ready oversight Keep the control record and governance narrative together for audit committees, customer assurance and supervisory requests. Framework support is not certification. Your organisation remains responsible for assessing its requirements and controls. Credit Union Requirements ## More than an XML file. An evidence trail behind every answer. Support the Central Bank AML Risk Evaluation Questionnaire with a connected workflow for data collection, validation, XML generation and approval. Keep the supporting policies, controls and risk assessments close to the answers. 0 1 ### Collect & validate Guide the team through the questionnaire and check the data against the required submission schema. 0 2 ### Generate XML Produce the structured XML file for upload, reducing manual formatting and conversion work. 0 3 ### Sign off & evidence Route the completed questionnaire for approval and named-officer sign-off, with the supporting evidence linked to the record. Prepare the submission in BoardX; submit through the Central Bank’s required channel. Confirm the applicable guidance and deadline for your return. Why BoardX for compliance? ## Less fragmented work. More visible accountability. 0 1 ### Evidence in one place Store and track supporting documents in a central repository, with role-based access. 0 2 ### Less manual coordination Use structured workflows for recurring procedures, so your team can focus on the work that needs judgement. 0 3 ### Audits and assessments Support site, process and regulatory assessments with an organised record of controls and evidence. 0 4 ### The right information, shared Distribute relevant material to the groups, teams and departments that need it. 0 5 ### Clear permissions Use role-based access to keep responsibilities and access to information aligned. 0 6 ### Connected governance Manage compliance within the same platform as your board meetings, policies and risk register. Part of the whole governance picture ## The work behind compliance. The context behind oversight. Keep compliance alongside your meetings, policies and risks. When directors need the history behind an issue, Private IQ helps them research the material included in their agreed index and follow the answer back to its source. Explore Private IQ A question for your next board meeting ## What evidence sits behind the assurance? A completed task and an effective control are different things. Bring the evidence, exceptions and outstanding actions into the board picture. Read our board preparation guide → See compliance automation in action ## Bring your compliance challenge. See a clearer way through. Tell us which frameworks you work with and where the manual effort sits. We’ll focus the demonstration on your team’s workflow. --- # Board risk oversight software | BoardX > A risk score is a starting point, not the whole discussion. Bring the register, review workflows and reporting together — with ownership and evidence close… Canonical URL: https://www.boardx.io/for-risk For risk · clarity & accountability # Know the exposure. Challenge with context. A risk score is a starting point, not the whole discussion. Bring the register, review workflows and reporting together — with ownership and evidence close to every discussion. Explore the capabilities SEE RISKS CLEARLYThe register your team works in. The picture your board needs. A connected risk practice ## Four ways to bring risk into view. Keep the operational work rigorous and give the board the context it needs to ask better questions. Every capability starts from the same connected risk record. 0 1 ### Risk Register & Heat Map Every risk in one place, owned by one person, scored the same way. Bring exposure, ownership, controls and assessment into a structured record your whole organisation can work from. - Clear ownership - Consistent scoring - Connected controls 0 2 ### Automated Risk Workflows Review cycles, escalation and mitigation tracked to completion. Set the cadence, route the right work to the right people and keep every review decision on the record. - Review rhythm - Escalation paths - Follow-through 0 3 ### AI Risk Management Register, assess and govern every AI system with EU AI Act alignment. Give your AI estate the same accountable treatment as the other risks your organisation is responsible for. - System register - Defined assessment - Human oversight 0 4 ### Board Risk Reporting Board-ready reporting that pulls live from the same register. Give directors a more useful view of movement, context and ownership before the discussion begins. - Material movement - Context for challenge - Actions on record One source of truth. No product screens required to understand the work. Risk, compliance and the board ## Your risk register. Not another isolated tool. Manage risk alongside the board cycle and compliance work. Bring the register, control evidence and board discussion closer together instead of treating each as a separate reporting exercise. Explore compliance automation A question for your next board meeting ## What has changed since we last assessed this risk? A risk score needs context: the movement in exposure, the controls being relied on and the action owner. Make that the conversation. Read our board preparation guide → See risk management in action ## Replace the spreadsheet. Improve the conversation. Show us where your current process gets stuck. See how BoardX brings the register, reviews and reporting together. --- # Risk register software | BoardX > Bring organisational risks into one structured register, with consistent categories, scoring and ownership. Canonical URL: https://www.boardx.io/for-risk/risk-register ← BoardX home # Your risk register. A clearer view of exposure. Bring organisational risks into one structured register, with consistent categories, scoring and ownership. ## See the risk landscape Use a risk heat map to examine where exposure sits, how assessments are changing and where attention is needed. Keep that picture connected to the board discussion. ## Build on the work you have Import an existing spreadsheet register or create risks in BoardX. AI-powered suggestions can help identify relevant risks for your team to assess. ## Make ownership visible Assign owners, define mitigation plans and track controls and remediation. Capture risk events and issues, investigate causes and record corrective actions. Explore Compliance & Risk → --- # Risk management workflows | BoardX > Connect assessments, mitigation work, escalations and approvals in a repeatable risk-management process. Canonical URL: https://www.boardx.io/for-risk/risk-workflows ← BoardX home # Risk reviews that keep moving. Connect assessments, mitigation work, escalations and approvals in a repeatable risk-management process. ## Schedule the review Trigger assessments through schedules or events, with clear responsibilities for each step. ## Follow mitigation through Assign control owners, set milestones and track remediation. Monitor control effectiveness and adjust plans as the risk picture changes. ## Escalate with context Use escalation paths to bring overdue work and emerging issues to the right people. Keep progress and approvals on the record. Explore Compliance & Risk → --- # Board risk reporting | BoardX > Give directors and executives a view of the risk register that supports a focused conversation about exposure and priorities. Canonical URL: https://www.boardx.io/for-risk/board-risk-reporting ← BoardX home # Less report assembly. Clearer risk oversight. Give directors and executives a view of the risk register that supports a focused conversation about exposure and priorities. ## A board-facing view Use dashboards to examine critical risks, trends and exposure levels. Combine the risk heat map with ownership, control and mitigation information. ## Connected to the work Keep reporting connected to the same register the team manages. Bring risk into the governance picture alongside policies, compliance and board decisions. ## Keep changes visible Monitor risks and controls and use alerts when exposure changes, helping the team identify what needs attention between reviews. Explore Compliance & Risk → --- # Board governance insights | BoardX > Practical perspectives on preparation, institutional memory and responsible AI. Written to be used in your next board cycle, not filed away. Canonical URL: https://www.boardx.io/insights BoardX perspective ## The context gap: what a board pack leaves behind. A shorter pack can help. But the earlier decision, its conditions and the unanswered questions still matter. 4 minute read · Read now → Practical board guide ## Six questions before the next board decision. A practical preparation guide for directors, chairs and the teams writing the papers. 4 minute read · Read now → AI & board oversight ## AI should prepare the board. Not make its judgement. What to ask about sources, boundaries and human review before bringing AI into board work. 4 minute read · Read now → ## A point of view. Not a claim to have all the answers. These are BoardX’s practical perspectives. They are not presented as independent research or a validated methodology. We welcome the questions and real-world experience that make the conversation better. Explore the Governance Circle → Put the thinking to work ## A clearer conversation starts with better preparation. See how BoardX connects your meetings, policy, compliance and risk—with intelligence to help directors use the record. --- # BoardX for directors, executives and company secretaries > Practical guidance for the people preparing the papers, leading the organisation and shaping the board’s decisions. Canonical URL: https://www.boardx.io/roles Company secretaries ## Keep the board cycle moving. Keep the record clear. Practical guidance for the people turning papers, meetings and follow-up into a dependable governance process. Read the role guide → C-suite executives ## Bring a clear recommendation. Leave with a clear decision. Help your board understand the choices, challenge the assumptions and give management a usable mandate. Read the role guide → Board chairs & directors ## Use board time for the questions that matter. Prepare with context, challenge with purpose and keep sight of what the board has agreed. Read the role guide → Put it into practice ## Start with your next board meeting. Explore BoardX around the work your team needs to improve. --- # BoardX Academy | Governance learning for boards > Practical learning for directors, company secretaries, compliance and risk teams. Connect governance theory with the decisions and conversations that happen… Canonical URL: https://www.boardx.io/academy BoardX Academy # Bring fresh thinking into the boardroom. Practical learning for directors, company secretaries, compliance and risk teams. Connect governance theory with the decisions and conversations that happen around the table. Explore more BoardX Academy ## Nine themes. A broader boardroom perspective. 0 1 ### Boardroom Dynamics & Leadership Psychological safety, the Chair–CEO relationship and accountability among peers. 0 2 ### Strategic Information Architecture Better board packs, clearer narratives and relevant stakeholder information. 0 3 ### AI Governance & Tech Risk AI oversight, algorithmic bias and technology supply-chain due diligence. 0 4 ### Advanced Enterprise Risk Oversight Risk assessment and the information directors need to examine exposure. 0 5 ### Human Capital & Talent Strategy Talent, the future workforce and the evolving compensation committee. 0 6 ### Shareholder Activism & Engagement Institutional engagement, shareholder expectations and preparedness. 0 7 ### The Evolving Company Secretary Digital governance, regulatory agility and a more strategic role. 0 8 ### Circular Economy & Sustainability Producer responsibility and sustainability across supply chains. 0 9 ### Crisis Management & Resilience Cyber incidents, reputation and board leadership under pressure. People at the centre ## Learning that belongs in the next meeting. Director education should inform real decisions. Explore subjects that help you prepare more thoughtfully, question more effectively and contribute a wider perspective. A question for your next board meeting ## What does the board need to understand—not just read? Start with the decision, the earlier record and the evidence still missing. Explore practical prompts for a more focused discussion. Read our board preparation guide → Let’s talk ## Bring your questions. Meet the team and see where BoardX fits your organisation. --- # BoardX Governance Circle | For chairs and directors > An invitation-only gathering for forward-thinking chairs and directors. Exchange perspectives, learn from peers and explore the challenges changing the… Canonical URL: https://www.boardx.io/governance-circle BoardX Governance Circle # Good governance grows through better conversations. An invitation-only gathering for forward-thinking chairs and directors. Exchange perspectives, learn from peers and explore the challenges changing the boardroom. Explore more BoardX Governance Circle ## A conversation worth making time for. 0 1 ### Learn from experience Practical workshops and perspectives from people who understand board leadership. 0 2 ### Build peer connections Meet fellow chairs and directors to discuss common challenges and different approaches. 0 3 ### Look ahead Explore digital disruption, strategic complexity and the changing responsibilities of the board. People at the centre ## A space for candid discussion. Chatham House Rules apply. The Circle brings governance leaders together to share experiences and examine the decisions facing their boards. Ask the BoardX team about participation and upcoming gatherings. An example of the conversation ## Inside a Governance Circle gathering. Sample agenda — not a confirmed event schedule. - Welcome and an introduction to the Circle - Cyber security simulation: decisions under pressure - Effective chairing: board packs, participation and constructive meetings - Mission-led boards: purpose, funding and public trust - Peer networking and continuing the conversation A question for your next board meeting ## What does the board need to understand—not just read? Start with the decision, the earlier record and the evidence still missing. Explore practical prompts for a more focused discussion. Read our board preparation guide → Let’s talk ## Interested in the Circle? Book a conversation with the team to ask about participation. Join the waitlist: circle@boardx.io --- # Partner programme | BoardX > Help your clients run better board meetings, manage risk and keep compliance work moving. Bring your advisory experience together with the BoardX platform. Canonical URL: https://www.boardx.io/partners/program Partners # Your expertise. A stronger governance offering. Help your clients run better board meetings, manage risk and keep compliance work moving. Bring your advisory experience together with the BoardX platform. Explore more Partners ## Find your place in the partner programme. 0 1 ### Referral partners Introduce BoardX to organisations in your network that need a more connected way to manage governance. 0 2 ### Solution partners Bring BoardX into your advisory and implementation work, helping clients put better governance processes into practice. 0 3 ### Technology partners Explore ways to connect complementary technology with the BoardX platform. 0 4 ### Auditors Help clients organise governance records and evidence so the audit process is easier to follow. People at the centre ## More time for the advice that matters. For advisory firms, risk consultancies and governance specialists, the opportunity is practical: help clients reduce fragmented work, establish ownership and bring clearer information to the board. Discuss your service model with us to explore where BoardX fits. A question for your next board meeting ## What does the board need to understand—not just read? Start with the decision, the earlier record and the evidence still missing. Explore practical prompts for a more focused discussion. Read our board preparation guide → Let’s talk ## Explore working together. Meet the team and see where BoardX fits your organisation. Apply to partner: partners@boardx.io --- # Privacy and data protection statement | BoardX > How BoardX Limited collects, uses and protects personal data, and how to exercise your data protection rights. Canonical URL: https://www.boardx.io/privacy-statement ← BoardX home # Privacy & Data Protection Statement Version 4.1 • Effective: 28 January 2026 ## 1. Introduction In our everyday business operations, BoardX makes use of a variety of data about identifiable individuals, including data about: - Current, past and prospective service users - Visitors to our websites - Marketing subscribers - Other stakeholders In collecting and using this data, BoardX is subject to a variety of legislation controlling how such activities may be carried out and the safeguards that must be put in place to protect it. ## 2. Scope ### 2.1 Application This Data Protection Policy applies to: - Any person who is employed by BoardX who receives, handles, or processes personal data in the course of their employment. - Third party companies/individuals (data processors) that receive, handle, or process personal data on behalf of BoardX. ### 2.2 Governing Legislation - Regulation (EU) 2016/679 (General Data Protection Regulation) - Data Protection Act 2018 - S.I. No. 336/2011 – European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011 ## 3. Purpose The purpose of this policy is to set out the relevant privacy and data protection legislation and to describe the steps BoardX is taking to ensure that we comply with it. This control applies to all systems, people and processes that constitute BoardX's information systems, including directors, management, employees, suppliers, and other third parties who may be given access to the personal data controlled by BoardX. The following policies and procedures are relevant to this document and should be read in conjunction: - End User Licence Agreement - Technical and Organisational Measures Statement - Information Security Policy ## 4. Data Protection Policy ### 4.1 The General Data Protection Regulation It is BoardX's policy to protect the rights and freedoms of our employees and clients and to ensure that our compliance with the GDPR and other relevant legislation is clear and demonstrable at all times. The General Data Protection Regulation (GDPR) is one of the most significant pieces of legislation affecting the way that BoardX carries out its information processing activities. ### 4.2 Relevant Definitions The definitions most relevant to this policy are listed below (extracted from GDPR – Article 4): - Term — Definition - Personal Data — Any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person – Article 4(1). - Processing — Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction – Article 4(2). - Controller — The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data – Article 4(7). - Processor — A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller – Article 4(8). - Third Party — A natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data – Article 4(10). ### 4.3 Principles Relating to Processing of Personal Data The GDPR is based on fundamental principles set out in Article 5. Personal data shall be: - Principle — Description - Lawfulness, fairness & transparency — Processed lawfully, fairly and in a transparent manner in relation to the data subject. - Purpose limitation — Collected for specified, explicit and legitimate purposes and not further processed in an incompatible manner. - Data minimisation — Adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed. - Accuracy — Accurate and, where necessary, kept up to date. - Storage limitation — Kept in a form which permits identification of data subjects for no longer than is necessary for the stated purposes. - Integrity & confidentiality — Processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage. - Accountability — The controller shall be responsible for, and be able to demonstrate, compliance with all of the above principles. BoardX will take all reasonable steps to ensure that we and our outsourced processors comply with all of these principles both in current processing activities and in the introduction of new methods of processing. ### 4.4 The Rights of the Individual Data Subject rights under the GDPR consist of: - The right to be informed - The right of access - The right to rectification - The right to erasure - The right to restrict processing - The right to data portability - The right to object - Rights in relation to automated decision making and profiling Each of these rights is supported by appropriate procedures within BoardX that allow the required action to be taken within the timescales set out in the GDPR: - Data Subject Request — Timescale - The right to be informed — When data is collected (if supplied by data subject) or within one month (if not supplied by data subject) - The right of access — One month - The right to rectification — One month - The right to erasure — Without undue delay - The right to restrict processing — Without undue delay - The right to data portability — One month - The right to object — On receipt of objection - Rights in relation to automated decision making and profiling — Not specified ### 4.5 Lawfulness of Processing At BoardX, it is our policy to identify and designate the appropriate lawful basis for processing personal data and to document it, in accordance with the Regulation. The six lawful bases under GDPR Article 6 are described below: #### Consent Where relying on consent as the legal basis for processing, BoardX will always obtain and retain evidence of explicit consent from a data subject to collect and process their data. In respect to children below the age of 16, parental consent will be obtained. We will provide transparent information about our use of personal data at the time consent is sought and will explain their rights, including the right to withdraw consent. This information will be provided in an accessible form, written in clear and plain language, free of charge. #### Performance of a Contract Where personal data processing is required to fulfil a contract between BoardX and the data subject, explicit consent will not be required. This will often be the case where a contract cannot be completed without the personal data in question – e.g. data required to complete a payment transaction or to process wage payments. #### Legal Obligation Where personal data processing is required in order to comply with the law, explicit consent will not be required. This may be the case for some data related to employment and taxation, for example. #### Vital Interests of the Data Subject Where personal data processing is required to protect the vital interests of the data subject or of another natural person, this may be used as the lawful basis. Where this basis is used, BoardX will retain reasonable, documented evidence. This basis will be used only in extreme circumstances – for instance, in a life or death situation – where the consent of the data subject cannot be obtained. #### Task Carried Out in the Public Interest Where BoardX needs to perform a task that it believes is in the public interest or as part of an official duty, the data subject's consent will not be requested. The assessment of the public interest or official duty will be documented and made available as evidence where required. #### Legitimate Interests If the processing of specific personal data is in the legitimate interests of BoardX and is judged not to affect the rights and freedoms of the data subject in a significant way, then this may be relied upon as the lawful basis for processing. The reasoning will be documented. For example, it may be used to send email information on events, resources or BoardX features and benefits that individuals are likely to have a professional interest in, or to send information on services or special offers. Digital marketing is governed by the ePrivacy Regulations, 2011. ### 4.6 Privacy by Design BoardX has adopted the principle of Privacy by Design and has reviewed and appropriately modified our business processes to comply with this element of the GDPR. We will ensure that the definition and planning of all new or significantly changed methods for collecting or otherwise processing personal data will be subject to due consideration of privacy issues, including the completion of legitimate interest assessments and data protection impact assessments where necessary. The use of techniques such as data minimisation and pseudonymisation are considered where applicable and appropriate. ### 4.7 Direct Marketing BoardX uses email to send information about free, informational GRC-related webinars and events, and about our products and services to current, past and prospective service users, and marketing subscribers. We carry out this activity under GDPR article 6.1(f), legitimate interest. This process uses minimal personal data (name, email, company name, job description). All marketing emails contain an opt-out mechanism. ### 4.8 Contracts Involving the Processing of Personal Data BoardX will ensure that all personal data processing relationships it enters into are subject to a documented contract that includes, at a minimum, the specific information and terms required by the GDPR. For more information, refer to your End User Licence Agreement. ### 4.9 International Transfers of Personal Data It is BoardX's policy to process all personal data within the European Union, within reason. Any potential transfers of personal data outside the EU will be carefully reviewed prior to the transfer taking place. This is so that we can ascertain that the receiving third country falls within the limits imposed by the GDPR and that they have appropriate safeguards in place in relation to privacy and personal data protection. ### 4.10 Data Protection Officer A defined role of Data Protection Officer (DPO) is required under the GDPR if an organisation is a public authority, if it performs large-scale monitoring, or if it processes special categories of data on a large scale. The DPO is required to have an appropriate level of knowledge of data protection law and of their organisation's business environment. It can either be an in-house resource or be outsourced to an appropriate service provider. BoardX has evaluated the requirement and decided that the appointment of a Data Protection Officer is not required. The responsibility for data protection has been assigned to the management team. Data protection compliance monitoring is the responsibility of the CEO. ### 4.11 Breach Notification It is our policy to be fair and proportionate when considering actions to be taken to inform affected parties regarding breaches of their personal data. In line with the GDPR, where a breach is known to have occurred which is likely to result in a risk to the rights and freedoms of individuals, the relevant supervisory authority will be informed within 72 hours. This will be managed in accordance with our Incident Response Plan which sets out the overall process for handling information security incidents. ### 4.12 Addressing Compliance with the GDPR The following actions are undertaken to ensure that BoardX always complies with the accountability principle of the GDPR: - The legal basis for processing personal data is clear and unambiguous. - Appropriate resources have been assigned to the function responsible for data protection in the organisation. - All personnel involved in handling personal data understand their responsibilities for following good data protection practice. - Training in data protection is provided to all employees. - Data protection is part of all new employee induction training. - The rules regarding consent are followed. - Routes are available to data subjects wishing to exercise their rights regarding personal data and there are procedures in place to ensure that such requests are handled effectively. - An incident and near-miss reporting process is in place and is reviewed regularly. - Regular reviews of processes and procedures involving personal data are carried out. - Privacy by design is adopted for all new, or significant modifications to, systems and processes. The following documentation of processing activities is recorded: - Organisation name and relevant details - Purposes of the personal data processing - Categories of individuals and personal data processed - Categories of personal data recipients - Agreements and mechanisms for transfers of personal data to non-EU countries including details of controls in place - Personal Data retention schedules - Relevant technical and organisational controls in place These actions are reviewed on a regular basis as part of the management process concerned with data protection. ## 5. Contact Details BoardX Limited The Hatch Lab, M11 Business Campus Innovation House Gorey, Co. Wexford, Y25A8H2 Ireland Email: [dataprotection@boardx.io](mailto:dataprotection@boardx.io) Telephone: +353 1 9131775 ## 6. Right of Complaint to the Data Protection Supervisory Authority You have the right to lodge a complaint with the Data Protection Supervisory Authority (DPSA). BoardX is registered in Ireland; the relevant DPSA contact details are: Data Protection Commission 21 Fitzwilliam Square South Dublin 2 D02 RD28 Ireland Webform: [https://forms.dataprotection.ie/contact](https://forms.dataprotection.ie/contact) Telephone: +353 (0)76 110 4800 or +353 (0)57 868 4800 --- # Master Subscription Agreement | BoardX > The BoardX Limited Master Subscription Agreement: the terms that govern use of the BoardX platform. Canonical URL: https://www.boardx.io/terms-and-conditions ← BoardX home # Master Subscription Agreement (MSA) Terms And Conditions ## 1. SAAS SERVICES AND SUPPORT **1.1.** Subject to the terms of this Agreement, BoardX Limited herein after referred to as "Company" will use commercially reasonable efforts to provide Customer the Services in accordance with the Service Level Terms. As part of the registration process, Customer will identify a tenant owner user name and email for Customer's Company account. Company reserves the right to refuse registration of, or cancel email accounts it deems inappropriate. **1.2.** Subject to the terms hereof, Company will provide Customer with reasonable technical support services. ## 2. RESTRICTIONS AND RESPONSIBILITIES **2.1.** Customer will not, directly or indirectly: reverse engineer, decompile, disassemble or otherwise attempt to discover the source code, object code or underlying structure, ideas, know-how or algorithms relevant to the Services or any software, documentation or data related to the Services ("Software"); modify, translate, or create derivative works based on the Services or any Software (except to the extent expressly permitted by Company or authorised within the Services); use the Services or any Software for timesharing or service bureau purposes or otherwise for the benefit of a third; or remove any proprietary notices or labels. With respect to any Software that is distributed or provided to Customer for use on Customer premises or devices, Company hereby grants Customer a non-exclusive, non-transferable, non-sublicensable license to use such Software during the Term only in connection with the Services. **2.2.** Customer represents, covenants, and warrants that Customer will use the Services only in compliance with Company's standard published policies then in effect (the "Policy") and all applicable laws and regulations. Customer hereby agrees to indemnify and hold harmless Company against any damages, losses, liabilities, settlements and expenses (including without limitation costs and attorneys' fees) in connection with any claim or action that arises from an alleged violation of the foregoing or otherwise from Customer's use of Services. Although Company has no obligation to monitor Customer's use of the Services, Company may do so and may prohibit any use of the Services it believes may be (or alleged to be) in violation of the foregoing. **2.3.** Customer shall be responsible for obtaining and maintaining any equipment and ancillary services needed to connect to, access or otherwise use the Services, including, without limitation, modems, hardware, servers, software, operating systems, networking, web servers and the like (collectively, "Equipment"). Customer shall also be responsible for maintaining the security of the Equipment, Customer account, passwords (including but not limited to administrative and user passwords) and files, and for all uses of Customer account or the Equipment with or without Customer's knowledge or consent. ## 3. CONFIDENTIALITY; PROPRIETARY RIGHTS **3.1.** Each party (the "Receiving Party") understands that the other party (the "Disclosing Party") has disclosed or may disclose business, technical or financial information relating to the Disclosing Party's business (hereinafter referred to as "Proprietary Information" of the Disclosing Party). Proprietary Information of Company includes non-public information regarding features, functionality and performance of the Service. Proprietary Information of Customer includes non-public data provided by Customer to Company to enable the provision of the Services ("Customer Data"). The Receiving Party agrees: (i) to take reasonable precautions to protect such Proprietary Information, and (ii) not to use (except in performance of the Services or as otherwise permitted herein) or divulge to any third person any such Proprietary Information. The Disclosing Party agrees that the foregoing shall not apply with respect to any information after five (5) years following the disclosure thereof or any information that the Receiving Party can document (a) is or becomes generally available to the public, or (b) was in its possession or known by it prior to receipt from the Disclosing Party, or (c) was rightfully disclosed to it without restriction by a third party, or (d) was independently developed without use of any Proprietary Information of the Disclosing Party or (e) is required to be disclosed by law. **3.2.** Customer shall own all right, title and interest in and to the Customer Data. Company shall own and retain all right, title and interest in and to (a) the Services and Software, all improvements, enhancements or modifications thereto, (b) any software, applications, inventions or other technology developed in connection with Implementation Services or support, and (c) all intellectual property rights related to any of the foregoing. **3.3.** Company may collect and analyse aggregated, anonymised, and de-identified data relating to the use and performance of the Services for the purposes of improving and enhancing the Services, conducting diagnostics, and developing new features. Such data will be fully anonymised prior to any analysis and will not contain, and cannot reasonably be used to identify, any individual data subject or any Customer-specific information. Company will not use Customer Data in identifiable form for its own business purposes beyond what is strictly necessary to provide the Services as described in this Agreement. Any such use of anonymised data does not constitute processing of personal data under the GDPR and no rights or licences in Customer Data are granted to Company beyond those expressly required to deliver the Services. ## 4. PAYMENT OF FEES **4.1.** Customer will pay Company the then applicable fees described in the Order Form for the Services and Implementation Services in accordance with the terms therein (the "Fees"). If Customer's use of the Services exceeds the Service Capacity set forth on the Order Form or otherwise requires the payment of additional fees (per the terms of this Agreement), Customer shall be billed for such usage and Customer agrees to pay the additional fees in the manner provided herein. Company reserves the right to change the Fees or applicable charges and to institute new charges and Fees at the end of the Initial Service Term or then current renewal term, upon thirty (30) days prior notice to Customer (which may be sent by email). If Customer believes that Company has billed Customer incorrectly, Customer must contact Company no later than 60 days after the closing date on the first billing statement in which the error or problem appeared, in order to receive an adjustment or credit. Inquiries should be directed to Company's customer support department. **4.2.** Company may choose to bill through an invoice, in which case, full payment for invoices issued in any given month must be received by Company twenty (20) days after the date of the invoice. Unpaid amounts are subject to a finance charge of 1.5% per month on any outstanding balance, or the maximum permitted by law, whichever is lower, plus all expenses of collection and may result in immediate termination of Service. Customer shall be responsible for all taxes associated with Services. ## 5. TERM AND TERMINATION **5.1.** Subject to earlier termination as provided below, this Agreement is for the Initial Service Term as specified in the Order Form, and shall be automatically renewed for additional periods of the same duration as the Initial Service Term (collectively, the "Term"), unless either party requests termination at least thirty (30) days prior to the end of the then-current term. **5.2.** In addition to any other remedies it may have, either party may also terminate this Agreement upon ninety (90) days' notice (or without notice in the case of nonpayment), if the other party materially breaches any of the terms or conditions of this Agreement. Customer will pay in full for the Services up to and including the last day on which the Services are provided. All sections of this Agreement which by their nature should survive termination will survive termination, including, without limitation, accrued rights to payment, confidentiality obligations, warranty disclaimers, and limitations of liability. ## 6. WARRANTY AND DISCLAIMER Company shall use reasonable efforts consistent with prevailing industry standards to maintain the Services in a manner which minimizes errors and interruptions in the Services and shall perform the Implementation Services in a professional and workmanlike manner. Services may be temporarily unavailable for scheduled maintenance or for unscheduled emergency maintenance, either by Company or by third-party providers, or because of other causes beyond Company's reasonable control, but Company shall use reasonable efforts to provide advance notice in writing or by e-mail of any scheduled service disruption. However, Company does not warrant that the Services will be uninterrupted or error free; nor does it make any warranty as to the results that may be obtained from use of the Services. EXCEPT AS EXPRESSLY SET FORTH IN THIS SECTION, THE SERVICES AND IMPLEMENTATION SERVICES ARE PROVIDED "AS IS" AND COMPANY DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. ## 7. LIMITATION OF LIABILITY NOTWITHSTANDING ANYTHING TO THE CONTRARY, EXCEPT FOR BODILY INJURY OF A PERSON, COMPANY AND ITS SUPPLIERS (INCLUDING BUT NOT LIMITED TO ALL EQUIPMENT AND TECHNOLOGY SUPPLIERS), DIRECTORS, AFFILIATES, REPRESENTATIVES, CONTRACTORS AND EMPLOYEES SHALL NOT BE RESPONSIBLE OR LIABLE WITH RESPECT TO ANY SUBJECT MATTER OF THIS AGREEMENT OR TERMS AND CONDITIONS RELATED THERETO UNDER ANY CONTRACT, NEGLIGENCE, STRICT LIABILITY OR OTHER THEORY: (A) FOR ERROR OR INTERRUPTION OF USE OR FOR LOSS OR INACCURACY OR CORRUPTION OF DATA OR COST OF PROCUREMENT OF SUBSTITUTE GOODS, SERVICES OR TECHNOLOGY OR LOSS OF BUSINESS; (B) FOR ANY INDIRECT, EXEMPLARY, INCIDENTAL, SPECIAL OR CONSEQUENTIAL DAMAGES; (C) FOR ANY MATTER BEYOND COMPANY'S REASONABLE CONTROL; OR (D) FOR ANY AMOUNTS THAT, TOGETHER WITH AMOUNTS ASSOCIATED WITH ALL OTHER CLAIMS, EXCEED THE FEES PAID BY CUSTOMER TO COMPANY FOR THE SERVICES UNDER THIS AGREEMENT IN THE 12 MONTHS PRIOR TO THE ACT THAT GAVE RISE TO THE LIABILITY, IN EACH CASE, WHETHER OR NOT COMPANY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. ## 8. MISCELLANEOUS If any provision of this Agreement is found to be unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary so that this Agreement will otherwise remain in full force and effect and enforceable. This Agreement is not assignable, transferable or sublicensable by Customer except with Company's prior written consent. Company may transfer and assign any of its rights and obligations under this Agreement without consent. This Agreement is the complete and exclusive statement of the mutual understanding of the parties and supersedes and cancels all previous written and oral agreements, communications and other understandings relating to the subject matter of this Agreement, and that all waivers and modifications must be in a writing signed by both parties, except as otherwise provided herein. No agency, partnership, joint venture, or employment is created as a result of this Agreement and Customer does not have any authority of any kind to bind Company in any respect whatsoever. In any action or proceeding to enforce rights under this Agreement, the prevailing party will be entitled to recover costs and attorneys' fees. All notices under this Agreement will be in writing and will be deemed to have been duly given when received, if personally delivered; when receipt is electronically confirmed, if transmitted by facsimile or e-mail; the day after it is sent, if sent for next day delivery by recognized overnight delivery service; and upon receipt, if sent by certified or registered mail, return receipt requested. This Agreement shall be governed by the laws of the Republic of Ireland without regard to its conflict of laws provisions. --- # Terms of website use | BoardX > The terms that govern use of the BoardX website, including acceptable use, intellectual property and how to contact us. Canonical URL: https://www.boardx.io/terms ← BoardX home # Terms of Website Use Please read these Terms of Website Use carefully before using this site. ## 1. Acceptance of Terms These terms (together with any documents referred to within them) set out how you may access and use the BoardX website (“the Site”), whether as a visitor or registered user. By accessing, browsing, or using this Site, you confirm that you accept these terms and agree to comply with them. ## 2. Other Applicable Policies Your use of the Site is also governed by the following: - Privacy Policy – explains how we collect and use personal data - Cookie Policy – explains how we use cookies and similar technologies - Transparency Notice – explains how we process third-party data We encourage you to review these documents alongside these terms. ## 3. About BoardX This Site is operated by BoardX (“we”, “us”, or “our”). BoardX provides a Governance Intelligence platform designed to support boards, executives, and organisations in managing governance, risk, compliance, and AI oversight. Further company details are available upon request. ## 4. Changes to These Terms We may update these terms from time to time. Please check this page periodically to ensure you understand the terms that apply when you use the Site. ## 5. Changes to the Site We may update, modify, or remove content from the Site at any time without notice. Content may not always be current, and we are not obligated to update it. ## 6. Access to the Site The Site is provided free of charge. We do not guarantee that the Site, or any content on it, will always be available, uninterrupted, or error-free. We may suspend or restrict access at any time. You are responsible for ensuring that anyone accessing the Site through your internet connection is aware of and complies with these terms. ## 7. Account Security If you are provided with login credentials or create an account: - You must keep your login details confidential - You must not share access with any third party - You must notify us immediately if you suspect unauthorised access We reserve the right to disable accounts where these terms are breached. ## 8. Intellectual Property All content on the Site—including text, graphics, software, and materials—is owned by or licensed to BoardX and is protected by applicable intellectual property laws. You may: - View and download content for personal or internal business use - Share content within your organisation You may not: - Modify, reproduce, or distribute content for commercial purposes without permission - Use any content out of context or without proper attribution ## 9. Prohibited Use (Including Data Extraction and AI Training) You must not: - Use automated tools (e.g. bots, scrapers, crawlers) to access or extract data - Conduct text or data mining on any part of the Site - Use Site content to train or develop AI models without prior written consent This includes any attempt to analyse, extract, or repurpose content for machine learning, pattern recognition, or dataset creation. ## 10. Reliance on Information The content on this Site is provided for general information only. It does not constitute legal, regulatory, or professional advice. You should obtain appropriate professional advice before acting on any information found on the Site. While we aim to keep content accurate and up to date, we make no guarantees regarding completeness or accuracy. ## 11. User-Generated Content The Site may include content provided by users or third parties. Such content has not necessarily been reviewed or approved by BoardX and does not reflect our views. ## 12. Reporting Content If you believe any content on the Site is inappropriate, unlawful, or inaccurate, please contact us at: [info@boardx.io](mailto:info@boardx.io) ## 13. Limitation of Liability Nothing in these terms excludes liability where it cannot legally be excluded, including for: - Death or personal injury caused by negligence - Fraud or fraudulent misrepresentation To the extent permitted by law, we exclude all implied warranties relating to the Site. We are not liable for: - Loss of profits, revenue, or business - Business interruption - Loss of data or reputation - Any indirect or consequential loss ## 14. Security and Viruses We do not guarantee that the Site is secure or free from bugs or viruses. You are responsible for using appropriate security protections when accessing the Site. You must not: - Introduce malicious code or harmful material - Attempt unauthorised access to the Site or its infrastructure - Interfere with the operation or security of the Site ## 15. Third-Party Links The Site may contain links to external websites. These are provided for convenience only. We do not control or endorse third-party content and are not responsible for any loss or damage arising from your use of those sites. ## 16. Linking to Our Site You may link to our homepage provided that: - The link is fair and lawful - It does not damage our reputation - It does not imply endorsement where none exists We reserve the right to withdraw linking permission at any time. ## 17. Governing Law These terms are governed by the laws of Ireland. Any disputes will be subject to the jurisdiction of the Irish courts, unless otherwise required by applicable law. ## 18. Trade Marks All BoardX names, logos, and associated marks are the property of BoardX. You may not use them without prior written permission. ## 19. Contact Us For any questions regarding these terms, please contact: [info@boardx.io](mailto:info@boardx.io) Thank you for visiting BoardX. --- # The context gap: what a board pack leaves behind | BoardX > A shorter pack can help. But the earlier decision, its conditions and the unanswered questions still matter. Canonical URL: https://www.boardx.io/insights/the-context-gap In this perspective Our view is simple: a board pack should not ask directors to start from zero. The current recommendation matters, but so does the reasoning behind the last decision. Making that history usable is a practical part of board preparation—not an exercise in archiving. ## The latest paper is only part of the record A proposal may look sensible on its own and still leave an important question unanswered: what happened to the conditions the board set last time? A polished summary does not necessarily tell you. Neither does a longer pack. The useful distinction is between information and context. Information describes the proposal. Context helps directors understand how the organisation reached it, which assumptions have changed and what remains untested. ## A pilot is not the same decision as a rollout Consider a fictional example. In June, a board approves a six-month pilot and asks for an evaluation of cost and service quality. In September, management proposes a wider rollout. The new paper explains the opportunity, but the requested evaluation is absent. The board’s next question is not simply whether expansion sounds attractive. It is whether the pilot has provided enough evidence to justify a different commitment. Recovering the June decision changes the September conversation. ## Make the decision history usable For a returning agenda item, bring together the earlier approval, any conditions attached, the evidence now available and the precise decision being requested. Identify the source and date rather than relying on somebody’s recollection. Keep a distinction between an approved decision, a draft proposal and an unresolved discussion. When the record is incomplete, say so. An explicit gap is more useful than a confident explanation that the documents do not support. ## Institutional memory must survive a change of people Experienced directors often carry valuable context in their heads. New directors cannot be expected to inherit it by reading the latest pack. A navigable record gives them somewhere to start—and gives longer-serving directors a way to check their own recollection. This is why BoardX connects the meeting record with Private IQ. Directors can research the agreed indexed material, follow supporting sources and investigate what came before. The answer is a starting point for scrutiny, not a replacement for it. ## Start with one recurring agenda item Before your next meeting, choose one proposal the board has seen before. Ask the governance team to attach the prior decision and list any outstanding conditions. Then compare the new recommendation with that record. If the two do not line up, the discrepancy belongs in the discussion. The aim is not to revisit every past debate. It is to stop important context disappearing between meetings. For your next meeting Before asking “Do we agree?”, ask “What did we agree before—and what has changed?” A practical BoardX perspective, not independent research, legal advice or a compliance assessment. Apply it alongside your organisation’s policies and specialist advice where needed. Explore the Private IQ worked example → Continue reading Practical board guide ### Six questions before the next board decision. AI & board oversight ### AI should prepare the board. Not make its judgement. Put the thinking to work ## A clearer conversation starts with better preparation. See how BoardX connects your meetings, policy, compliance and risk—with intelligence to help directors use the record. --- # Six questions before the next board decision | BoardX > A practical preparation guide for directors, chairs and the teams writing the papers. Canonical URL: https://www.boardx.io/insights/before-the-next-decision In this perspective Reading the pack is necessary. Preparing a contribution is a different task. Use these questions to turn one important agenda item into a focused conversation. They are prompts for judgement, not a scorecard or a substitute for your organisation’s governance requirements. ## 01 / What exactly are we being asked to decide? Separate an item for information from a request for approval, advice or further work. For an approval, describe the commitment: scope, resources, timing and any conditions. If the requested decision cannot be stated plainly, clarify it before the meeting. For the paper’s author: put that request at the beginning and make clear what authority is being sought. ## 02 / What have we already agreed? Locate the earlier decision and any conditions or follow-up requests. Check whether this proposal continues that decision or changes it. Do not rely on a passing reference to “previous board discussions”. For the governance team: link the relevant approved record and identify anything still outstanding. ## 03 / What evidence could change our view? Distinguish results from forecasts and assumptions from established facts. Look for the evidence behind the most consequential claim. Ask what would have to be true for the proposal to succeed—and what would cause the board to reconsider. A missing evaluation, an old data point or an unexplained change in assumptions should become a specific question, not a general expression of concern. ## 04 / What alternatives have we considered? Understand why the recommendation is preferred to a smaller commitment, a different approach, a delay or no action. Consider the trade-offs rather than treating the recommended option as the only available route. The aim is proportionate challenge. Ask for the alternatives that could genuinely change the decision, not a catalogue of implausible options. ## 05 / Which risks and obligations come with it? Connect the proposal to the risk register and relevant policies. Ask who will own the controls, what evidence will show they are working and how exceptions will reach the board. A statement that a proposal is “within appetite” is a starting point. The useful discussion concerns the exposure, the assumptions behind that assessment and the consequences if they are wrong. ## 06 / What will happen after we decide? Agree the action owner, the next milestone and when the board expects an update. Be clear about what would trigger an earlier return. Record the decision and its conditions in wording that will still make sense at the next meeting. Afterwards, review the draft minutes against what the board actually agreed. AI can support drafting; people must check the substance and approve the record. For your next meeting Take one important paper. Write down the decision, the evidence gap and the question you want answered. A practical BoardX perspective, not independent research, legal advice or a compliance assessment. Apply it alongside your organisation’s policies and specialist advice where needed. See the BoardX meeting workflow → Continue reading BoardX perspective ### The context gap: what a board pack leaves behind. AI & board oversight ### AI should prepare the board. Not make its judgement. Put the thinking to work ## A clearer conversation starts with better preparation. See how BoardX connects your meetings, policy, compliance and risk—with intelligence to help directors use the record. --- # AI should prepare the board. Not make its judgement | BoardX > What to ask about sources, boundaries and human review before bringing AI into board work. Canonical URL: https://www.boardx.io/insights/ai-that-supports-judgement In this perspective The useful conversation about boardroom AI is not whether it can produce impressive text. It is where it helps, what it is allowed to use and how a person checks the result. Start with a defined task—such as researching an earlier decision or drafting minutes—rather than delegating an open-ended responsibility. ## Define the job before choosing the tool Drafting minutes and assessing a strategic proposal are not the same task. Set out the input, the expected output, the person reviewing it and what the AI must not do. A narrow, testable use case makes the boundaries easier to examine. Choose a representative example with a known source record. Compare the output with that record before treating speed as evidence of usefulness. ## Ask what the answer is based on Can the reviewer identify the document, date and passage supporting an answer? Does the system distinguish a recorded fact from an inference? What happens when the answer is not in the material it can access? A useful demonstration should include an unanswered question and conflicting or superseded documents—not only a clean example that produces a fluent response. ## Do not let “private” end the conversation Ask the provider which data is processed, where processing happens, which organisations can access it, how long it is retained and whether it is used for model training. Ask how access permissions, deletion and changes to the service are handled. Check the answers against the proposed configuration and contractual terms. A product label on its own does not establish the protections your organisation needs. ## Make human review a real step For minutes, the reviewer should check decisions, conditions, actions and material nuances against the meeting record. For research, the director should be able to inspect the supporting sources and recognise a gap. Name the person responsible for review and define what approval means. Do not allow a polished draft to become the accepted record by default. ## Treat agents as a different permission decision An assistant that suggests an action is different from an agent that sends, updates or approves something. Before granting action-taking access, specify its permitted actions, approval gates, audit record and stop mechanism. Start with bounded work where mistakes can be detected and corrected. Expand permissions deliberately rather than because the next automated step is technically possible. ## Where BoardX fits Private IQ helps directors research an agreed index and inspect the recorded context. AI Minutes provides a draft for human review. Both support work around the board’s judgement rather than replacing that judgement. Director’s Brief is in development: the intended next step is to bring relevant context to directors before the meeting. Agentic automation is a product direction. Ask for a demonstration of what is available today and a clear explanation of what remains on the roadmap. For your next meeting Ask for the source, the boundary and the reviewer—not just a convincing answer. A practical BoardX perspective, not independent research, legal advice or a compliance assessment. Apply it alongside your organisation’s policies and specialist advice where needed. Explore BoardX intelligence → Continue reading BoardX perspective ### The context gap: what a board pack leaves behind. Practical board guide ### Six questions before the next board decision. Put the thinking to work ## A clearer conversation starts with better preparation. See how BoardX connects your meetings, policy, compliance and risk—with intelligence to help directors use the record. --- # BoardX for company secretaries > Practical guidance for the people turning papers, meetings and follow-up into a dependable governance process. Canonical URL: https://www.boardx.io/roles/company-secretaries In this guide A well-run meeting starts long before the agenda is issued and continues after the minutes are approved. For company secretaries and governance teams, the challenge is keeping contributors, deadlines and decisions connected without becoming the organisation’s permanent chasing service. ## Before the meeting: make the request precise Agree the agenda with the chair and identify the purpose of each item: information, discussion or decision. Give paper owners a clear deadline and a short brief covering the decision required, evidence, alternatives and material risks. For a returning item, include the earlier decision and outstanding conditions. Check that directors receive the current version and can distinguish an approved record from a working draft. ## During the meeting: capture the substance Focus the record on what was decided, the conditions attached, the actions agreed and the significant considerations behind the decision. Resolve ambiguous wording while the discussion is still fresh. AI-assisted drafting can help prepare minutes. The governance team still needs to review the draft against the meeting record, check names and responsibilities, and follow the organisation’s approval process. ## After the meeting: close the loop Give each action a named owner, a due date and a clear description of completion. Where an action is blocked, record the dependency and the decision needed to move it forward. Prepare the next agenda from that record. Surface overdue commitments and unmet conditions early, rather than rediscovering them while assembling the next pack. ## A practical board-cycle checklist Before circulation: confirm the agenda purpose, paper owner, version and supporting record for each decision item. Before approving minutes: check decisions, conditions, actions and ownership. Before the next meeting: review outstanding commitments with the chair and responsible executives. ## How BoardX supports your work BoardX brings meeting preparation, board papers and the meeting record into one workspace. AI Minutes supports drafting for human review, helping your team spend more attention on the accuracy and usefulness of the record. Use a demonstration to walk through one complete meeting cycle: from collecting papers to recording a decision and following up the resulting work. Start with the stage that creates the most rework today. For your next meeting Choose one recurring agenda item. Connect its previous decision, current paper and outstanding actions before the next pack is issued. Explore board meeting management → C-suite executives ## Bring a clear recommendation. Leave with a clear decision. Help your board understand the choices, challenge the assumptions and give management a usable mandate. Read the role guide → Board chairs & directors ## Use board time for the questions that matter. Prepare with context, challenge with purpose and keep sight of what the board has agreed. Read the role guide → Put it into practice ## Start with your next board meeting. Explore BoardX around the work your team needs to improve. --- # BoardX for C-suite executives > Help your board understand the choices, challenge the assumptions and give management a usable mandate. Canonical URL: https://www.boardx.io/roles/c-suite-executives In this guide Executive teams need board meetings to produce direction. That depends on papers that make the decision clear, evidence that can withstand challenge and follow-through that turns approval into accountable delivery. More reporting is not always better preparation. ## Write for the decision you need Open with the recommendation and the authority you are seeking. State the commitment in practical terms: scope, resources, timing and the outcome management intends to deliver. Separate established results from forecasts and assumptions. Explain the alternatives considered, including a smaller commitment or no action, and make the trade-offs visible. ## Show what has changed When bringing a proposal back, start with the earlier decision. Explain which assumptions still hold, what new evidence is available and whether the requested commitment has changed. If a previous condition has not been met, say so and explain the consequence. A clear account of the gap gives the board a better basis for a decision than a polished narrative that leaves it out. ## Connect performance with risk Alongside progress, show the exposures that could prevent delivery. Identify the responsible executive, the controls in place and the evidence available about their effectiveness. Make exceptions specific. What has changed, what is management doing, and what decision or support is needed from the board? Keep operational detail available without allowing it to obscure the principal issue. ## Turn approval into accountable delivery Confirm the agreed scope and conditions before the meeting ends. Assign an owner to each commitment and agree the milestone or evidence the board expects next. Set a clear trigger for returning sooner: a material change in cost, timing, risk or expected benefit. Report against the original commitment so directors can see progress and exceptions together. ## How BoardX supports your work BoardX connects board meetings with policy, compliance and risk management. Teams can prepare the discussion around the same governance work that needs executive ownership between meetings. Start a demonstration with a real management proposal. Explore how the papers, relevant risk information and meeting record can support a clearer conversation and more disciplined follow-through. For your next meeting Review your next board paper: can a director identify the decision, alternatives, key assumption and accountable owner without searching for them? Explore the BoardX platform → Company secretaries ## Keep the board cycle moving. Keep the record clear. Practical guidance for the people turning papers, meetings and follow-up into a dependable governance process. Read the role guide → Board chairs & directors ## Use board time for the questions that matter. Prepare with context, challenge with purpose and keep sight of what the board has agreed. Read the role guide → Put it into practice ## Start with your next board meeting. Explore BoardX around the work your team needs to improve. --- # BoardX for board chairs & directors > Prepare with context, challenge with purpose and keep sight of what the board has agreed. Canonical URL: https://www.boardx.io/roles/board-chairs-directors In this guide A board’s contribution is not measured by how much information it receives. The useful question is whether directors have enough context to scrutinise the recommendation, recognise uncertainty and reach a considered decision. Chairs help create the conditions for that work; every director contributes to its quality. ## For chairs: shape a decision-led agenda Be clear about what each item needs from the board. Give consequential decisions adequate time and distinguish them from routine updates. Work with the executive and governance team to identify missing information before circulation. Invite challenge to the central assumptions and draw out differing views. Before moving on, summarise the decision, any conditions and the follow-up expected, so the record reflects a shared understanding. ## For directors: prepare a contribution For each significant proposal, identify the decision requested, the evidence supporting it and the assumption you most want to test. Check what the board agreed previously and whether any conditions remain outstanding. Prioritise questions that could change the decision. If essential information is missing, ask for it early and make the uncertainty explicit in the discussion. ## Challenge the recommendation, not just the numbers Ask why the proposed approach is preferable to the credible alternatives. Consider the consequences if the principal assumption is wrong, and whether a staged commitment would produce useful evidence. Connect the proposal to the organisation’s objectives, risk appetite and capacity to deliver. Distinguish a persuasive presentation from evidence that addresses the decision in front of you. ## Keep oversight connected between meetings Review progress against the commitments and conditions the board set. Ask for exceptions to be explained and for significant changes to return through the agreed escalation process. Use the approved record to support continuity when directors or executives change. Earlier decisions should be accessible context, not knowledge held only by those who attended the meeting. ## How BoardX supports your work BoardX brings board papers and meeting records together. Private IQ supports research across agreed indexed material, with supporting sources that directors can inspect as part of their preparation. AI output remains an aid to scrutiny. Check the underlying source, recognise gaps and apply your own judgement. In a demonstration, ask a question about an earlier decision and follow the answer back to its evidence. For your next meeting Before your next meeting, write down one assumption to test, one previous commitment to check and one question that could change the decision. Explore the Private IQ worked example → Company secretaries ## Keep the board cycle moving. Keep the record clear. Practical guidance for the people turning papers, meetings and follow-up into a dependable governance process. Read the role guide → C-suite executives ## Bring a clear recommendation. Leave with a clear decision. Help your board understand the choices, challenge the assumptions and give management a usable mandate. Read the role guide → Put it into practice ## Start with your next board meeting. Explore BoardX around the work your team needs to improve.