Board

The provided documents do not explicitly address whether Board uses user data to train AI models. The Cookie Policy discusses cookies for performance, analytics, and targeting, but contains no clear statement prohibiting or permitting AI training on user content. Absence of explicit protection warrants a moderate concern score.

“Not found in documents — scored conservatively”

[ToS] Event terms grant Board broad rights to record, film, photograph and use attendee likeness, name, voice and words 'in any form' and 'without any further approval' or payment, with rights to edit and allow commercial partners to use/distribute. However, this applies specifically to event attendance and photography, not general user-generated content within the platform. Scope is partially defined but broad for event context.

“[ToS] 'You agree to grant Board the right to record, film, photograph or capture your likeness, name, voice and words and to use, distribute or otherwise globally disseminate them in brochure, newspapers, magazines and other media...without any further approval from you or any payment to you.'”

[Cookie Policy] Board shares data with multiple third parties including advertising networks (Rubicon Project, Casale Media, DoubleClick), analytics providers (Marketo, Clarity, Dynatrace), and social media platforms. The policy states 'The complete list of processors is constantly updated and is available on request' but does not publish a comprehensive sub-processor list. Data sharing is acknowledged but controls are vague.

“[Cookie Policy] 'The data collected through the use of cookies may be processed by third companies providing various types of service to Board...The complete list of processors is constantly updated and is available on request by sending an e-mail to: [email protected]'”

[Cookie Policy] Retention periods vary widely by cookie type (session to 3649 days/10 years for some targeting cookies). No explicit statement on deletion timelines upon account termination or data lifecycle management. Vague language about 'reasonable period' is absent, but the lack of clear account deletion procedures and indefinite retention of some tracking cookies creates moderate concern.

“[Cookie Policy] Cookie lifespans range from 'Session' to '3649 Days' with no unified deletion policy stated. No explicit account termination data purge procedure documented.”

The provided documents do not explicitly address IP ownership of outputs generated within the Board platform. Event ToS addresses Board's IP in event materials and content, but does not clarify user ownership of data/outputs created using the platform. Absence of explicit user IP ownership protection warrants moderate concern.

“Not found in documents — scored conservatively”

[Security page] References 'Security & Compliance' link and mentions the platform has compliance features, but the provided security document excerpt does not list specific certifications (SOC 2, ISO 27001, GDPR, HIPAA). The page title references 'Information Security & Quality Guidelines and Principles' but substantive compliance certification details are not included in the extracted content.

“[Security] 'Security & Compliance' mentioned in navigation but specific certifications not detailed in provided excerpt. Document titled 'Board Information Security and Quality Guidelines and Principles' but full content not provided.”