Last updated: November 10, 2026
Almost every board software vendor now says it has AI, and almost every one says it is secure. For leadership teams handling non-public financials, strategy, compensation and M&A discussions, the useful question is more specific: which AI and security features actually protect board materials, and which ones save real time?
This guide covers 12 AI and security features to look for in board software in 2026, what each one means, and what to ask vendors before you buy. It is written for CEOs, CFOs, general counsels and corporate secretaries at public companies, established private companies, multi-entity groups and private equity-backed companies.
Transparency note: This guide is written by Zeck, a governance platform for leadership teams and boards. We describe how Zeck handles each feature and recommend confirming any vendor's current capabilities directly.
Some AI services use customer content to improve their models. For board materials, that is a non-starter. Ask every vendor in writing whether its AI, or any AI provider it uses, trains on customer data, and whether your data is ever mixed with other customers' data.
In Zeck: Zeck AI never trains on customer data, and your content is not mixed with other customers' data.
AI that can search board materials is only safe if it respects the same permissions as the materials themselves. A viewer or a director on one board should never get an AI answer drawn from materials they can't open.
In Zeck: Ask Zeck AI answers are limited to what each user has permission to see.
Directors and executives often need to know what the board decided, discussed or was told in earlier meetings. AI that can answer questions across past board materials saves hours of digging through old board books.
In Zeck: Ask Zeck AI lets directors and administrators ask questions across past board materials, such as what the board approved last year or how a metric has trended across meetings.
AI can help management teams turn notes and data into a first draft of a board update and pull out the key takeaways from reports and charts. The goal is a better starting point, not an unreviewed final draft.
In Zeck: Zeck AI helps teams draft board content and write key takeaways, which the team reviews and edits.
SOC 2 Type II is an independent audit of a vendor's security controls over a period of time, not just at a single point. Ask for the most recent report under NDA. Some vendors also hold ISO 27001.
In Zeck: Zeck is SOC 2 Type II certified.
Single sign-on lets your IT team manage access through your identity provider, so access is removed immediately when someone leaves.
In Zeck: Zeck supports enterprise SSO.
Directors who get locked out or forget passwords stop reading materials before meetings. Look for secure sign-in that is also easy, such as passwordless sign-in or multi-factor authentication that doesn't lock accounts constantly.
In Zeck: Directors can use passwordless sign-in.
The standard to look for is TLS for data moving between devices and servers, and AES-256 for stored data.
In Zeck: Zeck uses TLS in transit and AES-256 at rest.
Not everyone who sees board materials should have the same rights. Directors vote, observers view, and management teams contribute sections.
In Zeck: Users designated as board directors can vote. Viewers, such as observers, see the entire published Zeck but can't vote. Section-based permissions control what each contributor can edit while a Zeck is being built.
Multi-entity groups and private equity firms often run many boards and committees. Each board's materials, and any AI answers drawn from them, should stay separate.
In Zeck: Multi-entity groups and private equity firms run every board, committee and portfolio company in one account with separate permissions.
Knowing who opened which materials, and when, helps the chair plan the meeting and gives you a record if questions arise later about what directors were shown.
In Zeck: Administrators see which directors reviewed each section before the meeting.
Approved minutes, recorded votes and action items should be stored securely alongside the materials they relate to, so the record is complete for audits, financings and due diligence.
In Zeck: Teams approve audit-ready minutes and track action items, with materials and minutes kept in one place. Directors use Pre-Vote to signal how they plan to vote before the meeting so the chair knows which items need discussion, and final votes happen live.
Most established vendors now offer some AI features and independent security certifications. Features change quickly, so confirm details in a demo.
| Question | What a good answer looks like |
|---|---|
| Does your AI, or any AI provider you use, train on our data? | No, confirmed in the contract |
| Are AI answers limited to each user's permissions? | Yes, AI respects the same permissions as the materials |
| Which independent certifications do you hold? | SOC 2 Type II, with a current report available under NDA |
| Do you support SSO? | Yes, with your identity provider |
| How do you keep multiple boards and entities separate? | Separate permissions per board, committee and entity |
| Can we see who reviewed materials before the meeting? | Yes, by director and section |
| How are minutes, votes and records stored? | Securely, alongside the related materials, with audit-ready records |
Zeck is a modern governance platform for leadership teams and boards at established private companies, multi-entity groups, private equity firms and public companies. It combines board management, always-on governance between meetings, and board-grade security and secure AI in one platform: SOC 2 Type II, enterprise SSO, permission-aware Ask Zeck AI, and AI that never trains on your data.
Book a demo to see how Zeck handles AI and security with your own board materials.
The best AI features for boards are the ones that are both useful and safe: AI search across past board materials, help drafting content, and answers limited to each user's permissions, with a clear commitment that the AI never trains on your data. Zeck's Ask Zeck AI is built around those requirements. Compare any vendor's AI against the questions above.
Ask whether the AI trains on customer data, whether AI answers respect user permissions, and whether the vendor holds SOC 2 Type II certification. Get the answers in writing.
It can if AI answers aren't limited by permissions. Choose a platform where AI only draws on materials each user is allowed to see. In Zeck, Ask Zeck AI answers are limited to each user's permissions.
Look for TLS for data in transit and AES-256 for data at rest, along with independent certification such as SOC 2 Type II.
Formal voting rules depend on your bylaws and jurisdiction. In Zeck, directors use Pre-Vote to signal how they plan to vote so the chair knows which items need discussion. Final votes happen live in the meeting.