Security

Share the hard stuff.
We keep it safe.

You’ll put real numbers, people problems and strategic dilemmas into The Boardroom. That only works if the platform deserves it. Here is exactly how your data is protected — and exactly what’s still in progress.

Live today

Protection that’s live now

Encrypted in transit and at rest

TLS with strict HTTPS on every session; AES-256 encryption on stored data.

Your account, your data only

Every organisation is tenant-isolated. Your conversations, context and uploads are never visible to any other customer.

Not used to train public AI models

Your questions and context are sent to our AI provider (xAI) solely to generate your answer, under contract — never contributed to public training datasets.

Export or delete at any time

Download a full copy of your data from Settings, or request deletion. No lock-in.

Secure sign-in

Bcrypt-hashed passwords, short-lived tokens, httpOnly cookies, bot protection on registration.

Abuse prevention

Rate limiting, Turnstile on authentication, audit logging across chat, billing and admin actions.

Trusted infrastructure

Hosted on Render and Neon with Cloudflare at the edge. Subprocessor register published.

In progress

On the roadmap — stated plainly

Honesty over implication

We’d rather tell you what’s underway than imply it’s done. In progress now: SOC 2 Type I audit programme, and formal Data Processing Agreements with our AI providers. This page will be updated as each completes.

Commitments

What we never do

  • Sell your data to third parties
  • Share your conversations with other users
  • Store payment card numbers on our servers
  • Use your business context to train public AI models

Questions about our security?

Operated by Business Growth Formula Ltd. Write to support@businessgrowthformula.org — a person answers.