Your security policy. No board exception.

Directors see the company's most sensitive information, often on devices you don't manage. Konsaro brings them under your identity, access and audit controls, in a place they'd rather use than email.

Request a demo See how it works

The board exception

Your most sensitive data sits with your least-managed users.

Directors see results before the market, deals before they close and leadership changes before they're announced. Yet many are external, on personal devices and outside your directory, so board papers end up wherever is convenient.

Packs in private inboxesBoard PDFs get forwarded to personal addresses and saved to tablets, beyond every control you run.
Accounts outside your directoryExternal directors have no company identity. Their access is set up by hand, and rarely removed when they leave.
No answer to “who saw it?”When a document leaks, email can't tell you who opened it, when, or where it went next.

With Konsaro

Bring the board inside your security model.

The controls you already run everywhere else, identity, least privilege and logging, applied to board papers, meetings and decisions.

01 · Identity

Directors sign in the way your company does.

Connect Konsaro to your identity provider. Members use company sign-in; external directors get two-factor authentication. No separate board passwords for anyone to manage.

Single sign-onSAML 2.0 with your identity provider.
Provisioning with SCIMAccounts follow your directory. When someone leaves the board, their access ends with it.
MFA and idle sessionsTwo-factor authentication with an authenticator app or SMS. Administrators can end inactive sessions automatically, and failed sign-ins are rate-limited.

02 · Least privilege

Each paper reaches only the people who need it.

Restrict a document or agenda item to selected members. Room roles set the baseline, and invited guests see only what is meant for them.

Per-document accessLimit a single document or agenda item to named people, beyond room membership.
Roles plus fine-grained rightsRoom roles for organisers, secretaries and attendees, with finer access on single documents.
Guests per itemAn advisor joins for their item only and sees only its papers.

03 · No loose copies

Read anywhere, without forwardable attachments.

Papers are read inside Konsaro, behind sign-in, so nobody outside the access list holds a file to pass along. Every download is logged against a named person.

No attachmentsPacks are shared as access in Konsaro, not as email attachments.
Downloads on recordEvery download and data extraction is logged per member and per document.
Access ends with membershipRemove someone from the room or your directory, and their access to the papers ends.

04 · Audit trail

Every open, download and export on the record.

Activity is recorded against a named person, per document. When legal, audit or a regulator asks, you answer from the log, not from a round of emails.

Activity trailViews, downloads and data extractions, per member and per document.
Controlled exportsData exports use short-lived download links and are kept only for a limited time.
Exportable logExport the audit log for internal audit or your own archive.

Adoption

Controls only work if directors use them.

When the secure route is harder than email, board papers end up in email. Konsaro is built for directors first, so the controlled place is also the easiest place to read, prepare and decide.

One current pack, nothing to forward or re-send
Private notes right on the page
The same pack on laptop, tablet and phone

Vendor review

Ready for your security review.

The answers your questionnaire will ask for, stated plainly. Security documentation and the DPA are shared during a security review.

Stored in Switzerland
Board data is stored in Zurich. Application servers run in Germany (EU).
Encrypted in transit and at rest
TLS in transit, AES-256 at rest.
Backups and continuity
Daily database backups, kept for 7 days, and a public status page.
Secure development
Threat modelling, peer review, dependency scans and an automated security assessment before every release. Critical or High findings block a release.
Incident response
A documented response process, from preparation to lessons learned.
AI that doesn't learn from you
AI runs on Claude models by Anthropic through OpenRouter's EU endpoint, with zero data retention. Board material is not used to train them.

Bring your questionnaire.

Walk through it with our team, together with IT and your board office. You leave with the documentation your review needs.

1Send us your questionnaire or requirements
2See the setup and controls in a live walkthrough
3Receive the security documentation, the DPA and the subprocessor list

Request a security review Visit the Trust Center

Roll it out together

Konsaro for the people you'll work with

Security signs off. The board office runs it day to day, and directors use it every meeting.

Your security policy. No board exception.

Your most sensitive data sits with your least-managed users.

Bring the board inside your security model.

Directors sign in the way your company does.

Each paper reaches only the people who need it.

Read anywhere, without forwardable attachments.

Every open, download and export on the record.

Controls only work if directors use them.

Ready for your security review.

Stored in Switzerland

Encrypted in transit and at rest

Backups and continuity

Secure development

Incident response

AI that doesn't learn from you

Bring your questionnaire.

Konsaro for the people you'll work with

Corporate secretaries

Compliance officers

Board directors

Boards that run on Konsaro

Interested? Let's talk.