Customer data
Users, workspace records, source files, drafts and audit records remain in the separate AWS-based customer environment.
The environment can be provisioned in a supported AWS region selected for the customer.
Trust
Data movement and supporting services.
The services used for customer data are set out by purpose, data category and role in the Boardmate workflow.
01 Customer environment
Supabase on AWS provides database, authentication, storage and server functions.
02 Application
Vercel delivers the web application and does not hold the customer board-content database.
03 Drafting
Anthropic's Claude API processes the board packs, transcripts and meeting context needed for the requested output.
Data flow
Where customer material is processed.
Boardmate uses a small set of specialist services for customer data, application delivery, drafting, transcription and workflow connections. Each service has a defined purpose in the minutes workflow.
Customer setup Select the AWS region, identity provider, named users and reviewer access for the workspace.
Security review
Current data-flow, supplier, retention, deletion and control information is available for customer review.
Drafting and transcription
Claude receives only the material needed for drafting or regeneration. AssemblyAI receives audio only when transcription is enabled.
Boardmate's AssemblyAI account uses the US endpoint and is opted out of model training.Email and integrations
Resend supports account and service email. Microsoft, Google, Zoom and DocuSign are used only for the customer workflows that require them.
The current supplier schedule records purpose, data categories, location and published assurance.Customer environment and web delivery
Boardmate provisions a separate Supabase environment running on AWS for each customer. Vercel delivers the web application, while the customer database, authentication, storage and server functions remain in the AWS-based customer environment.
Supabase / AWS
Customer database, authentication, storage and server functions.
Vercel
Application hosting and web delivery. It does not hold the customer board-content database.
Regional choice
The customer environment can be provisioned in a supported AWS region selected for the customer.
AI, transcription and service email
Boardmate uses specialist services only for the part of the workflow they support. Customer material is not used by Boardmate to train a shared model.
Anthropic / Claude
Board packs, transcripts, meeting context and accepted instructions required for drafting or regeneration.
AssemblyAI
Optional audio transcription through the US endpoint. Boardmate's account is opted out of model training.
Resend
Account, meeting and workflow email. Documents are included only where the relevant workflow sends an attachment.
Supporting and customer-selected services
Supporting services cover document conversion, rate limiting and bot protection. Customer-selected connections remain off unless the workflow requires them.
- Google Cloud supports document conversion. Upstash provides distributed rate limiting. hCaptcha provides bot protection where enabled.
- Microsoft, Google and Zoom can provide sign-in. Microsoft Teams, Zoom and DocuSign can support customer-authorised workflows.
- The current supplier schedule records each provider's purpose, data categories, location and published assurance.
Common questions
Security questions teams ask.
Should confidential material be uploaded before security review is complete?
No. Real board packs, transcripts, recordings, draft minutes, and support files should wait until confidentiality and data-handling terms are agreed.
What can reviewers see through private links?
Reviewers see the draft and permitted support material for their review task. Workspace users keep control of source material, decisions, regeneration, export, and deletion requests.
What security detail can procurement request?
Teams can request current detail on data flow, subprocessors, access control, retention, deletion, support access, residency questions, and contract terms.