Last updated: November 10, 2026
Almost every board software vendor now says it has AI, and almost every one says it is secure. For leadership teams handling non-public financials, strategy, compensation and M&A discussions, the useful question is more specific: which AI and security features actually protect board materials, and which ones save real time?
This guide covers 12 AI and security features to look for in board software in 2026, what each one means, and what to ask vendors before you buy. It is written for CEOs, CFOs, general counsels and corporate secretaries at public companies, established private companies, multi-entity groups and private equity-backed companies.
Transparency note: This guide is written by Zeck, a governance platform for leadership teams and boards. We describe how Zeck handles each feature and recommend confirming any vendor's current capabilities directly.
Key takeaways
- The most important AI question is whether the vendor's AI trains on your data. The answer should be no.
- AI answers should be limited to what each user has permission to see. Otherwise AI search can expose materials a director or viewer was never meant to access.
- Independent certification such as SOC 2 Type II, plus enterprise SSO, is the baseline for sensitive board materials.
- Multi-entity groups and private equity firms need permissions that keep each board's materials separate, including from AI.
Quick guide: 12 AI and security features in board software
- AI that never trains on your data
- Permission-aware AI answers
- AI search across past board materials
- AI drafting and key takeaways
- SOC 2 Type II certification
- Enterprise SSO
- Low-friction secure sign-in for directors
- Encryption in transit and at rest
- Role-based access for directors, viewers and contributors
- Separation across boards, committees and entities
- Read tracking and access records
- Audit-ready minutes and voting records
AI features
1. AI that never trains on your data
Some AI services use customer content to improve their models. For board materials, that is a non-starter. Ask every vendor in writing whether its AI, or any AI provider it uses, trains on customer data, and whether your data is ever mixed with other customers' data.
In Zeck: Zeck AI never trains on customer data, and your content is not mixed with other customers' data.
2. Permission-aware AI answers
AI that can search board materials is only safe if it respects the same permissions as the materials themselves. A viewer or a director on one board should never get an AI answer drawn from materials they can't open.
In Zeck: Ask Zeck AI answers are limited to what each user has permission to see.
3. AI search across past board materials
Directors and executives often need to know what the board decided, discussed or was told in earlier meetings. AI that can answer questions across past board materials saves hours of digging through old board books.
In Zeck: Ask Zeck AI lets directors and administrators ask questions across past board materials, such as what the board approved last year or how a metric has trended across meetings.
4. AI drafting and key takeaways
AI can help management teams turn notes and data into a first draft of a board update and pull out the key takeaways from reports and charts. The goal is a better starting point, not an unreviewed final draft.
In Zeck: Zeck AI helps teams draft board content and write key takeaways, which the team reviews and edits.
Security features
5. SOC 2 Type II certification
SOC 2 Type II is an independent audit of a vendor's security controls over a period of time, not just at a single point. Ask for the most recent report under NDA. Some vendors also hold ISO 27001.
In Zeck: Zeck is SOC 2 Type II certified.
6. Enterprise SSO
Single sign-on lets your IT team manage access through your identity provider, so access is removed immediately when someone leaves.
In Zeck: Zeck supports enterprise SSO.
7. Low-friction secure sign-in for directors
Directors who get locked out or forget passwords stop reading materials before meetings. Look for secure sign-in that is also easy, such as passwordless sign-in or multi-factor authentication that doesn't lock accounts constantly.
In Zeck: Directors can use passwordless sign-in.
8. Encryption in transit and at rest
The standard to look for is TLS for data moving between devices and servers, and AES-256 for stored data.
In Zeck: Zeck uses TLS in transit and AES-256 at rest.
9. Role-based access for directors, viewers and contributors
Not everyone who sees board materials should have the same rights. Directors vote, observers view, and management teams contribute sections.
In Zeck: Users designated as board directors can vote. Viewers, such as observers, see the entire published Zeck but can't vote. Section-based permissions control what each contributor can edit while a Zeck is being built.
10. Separation across boards, committees and entities
Multi-entity groups and private equity firms often run many boards and committees. Each board's materials, and any AI answers drawn from them, should stay separate.
In Zeck: Multi-entity groups and private equity firms run every board, committee and portfolio company in one account with separate permissions.
11. Read tracking and access records
Knowing who opened which materials, and when, helps the chair plan the meeting and gives you a record if questions arise later about what directors were shown.
In Zeck: Administrators see which directors reviewed each section before the meeting.
12. Audit-ready minutes and voting records
Approved minutes, recorded votes and action items should be stored securely alongside the materials they relate to, so the record is complete for audits, financings and due diligence.
In Zeck: Teams approve audit-ready minutes and track action items, with materials and minutes kept in one place. Directors use Pre-Vote to signal how they plan to vote before the meeting so the chair knows which items need discussion, and final votes happen live.
How major board platforms approach AI and security
Most established vendors now offer some AI features and independent security certifications. Features change quickly, so confirm details in a demo.
- Diligent offers AI features across its governance, risk and compliance suite, and is widely used by large and regulated enterprises.
- OnBoard offers AI tools for tasks such as agendas, summaries and minutes, alongside a broad board portal.
- Nasdaq Boardvantage emphasizes security for public company boards, with multi-factor authentication and e-signatures.
- BoardEffect and Boardable focus mainly on nonprofit and mission-driven boards.
Questions to ask any board software vendor about AI and security
| Question |
What a good answer looks like |
| Does your AI, or any AI provider you use, train on our data? | No, confirmed in the contract |
| Are AI answers limited to each user's permissions? | Yes, AI respects the same permissions as the materials |
| Which independent certifications do you hold? | SOC 2 Type II, with a current report available under NDA |
| Do you support SSO? | Yes, with your identity provider |
| How do you keep multiple boards and entities separate? | Separate permissions per board, committee and entity |
| Can we see who reviewed materials before the meeting? | Yes, by director and section |
| How are minutes, votes and records stored? | Securely, alongside the related materials, with audit-ready records |
Why Zeck for secure AI and board-grade security
Zeck is a modern governance platform for leadership teams and boards at established private companies, multi-entity groups, private equity firms and public companies. It combines board management, always-on governance between meetings, and board-grade security and secure AI in one platform: SOC 2 Type II, enterprise SSO, permission-aware Ask Zeck AI, and AI that never trains on your data.
Book a demo to see how Zeck handles AI and security with your own board materials.
FAQs about AI and security in board software
Which board software has the best AI features?
The best AI features for boards are the ones that are both useful and safe: AI search across past board materials, help drafting content, and answers limited to each user's permissions, with a clear commitment that the AI never trains on your data. Zeck's Ask Zeck AI is built around those requirements. Compare any vendor's AI against the questions above.
How do I know if board software AI is secure?
Ask whether the AI trains on customer data, whether AI answers respect user permissions, and whether the vendor holds SOC 2 Type II certification. Get the answers in writing.
Can AI in board software expose confidential materials?
It can if AI answers aren't limited by permissions. Choose a platform where AI only draws on materials each user is allowed to see. In Zeck, Ask Zeck AI answers are limited to each user's permissions.
What encryption should board software use?
Look for TLS for data in transit and AES-256 for data at rest, along with independent certification such as SOC 2 Type II.
Can directors vote before the meeting?
Formal voting rules depend on your bylaws and jurisdiction. In Zeck, directors use Pre-Vote to signal how they plan to vote so the chair knows which items need discussion. Final votes happen live in the meeting.