Key Benefits
- Role-Based Access Control (RBAC)
Granular permissions ensure every user sees only what they are authorized to access. Define custom roles for board chairs, directors, committee members, observers, administrators, and corporate secretaries with precise control over every feature and document.
- AES-256 Encryption
All data is encrypted at rest using AES-256 encryption and in transit using TLS 1.3, ensuring that board documents, communications, and governance records are protected at every stage of their lifecycle.
- On Our Roadmap: SSO & SCIM
Single sign-on through SAML 2.0 and OIDC, with SCIM user provisioning, is planned. Preside authenticates with an email address and password today, so centralized identity governance is not yet available.
- Comprehensive Activity Monitoring
Real-time activity monitoring and audit logs track every user action, logins, document access, permission changes, and more, providing the visibility security teams need and the evidence regulators require.
- Compliance Certifications & SLA
Preside maintains industry-standard security certifications and provides enterprise SLA commitments for uptime, data recovery, and incident response, giving boards confidence in the platform's reliability and compliance posture.
Role-Based Access Control (RBAC)
Board governance involves multiple stakeholders with different responsibilities, authorities, and information needs, and security requires that each sees only what they should. Preside's role-based access control system provides granular permission management that maps precisely to your governance structure. Pre-built roles cover common governance positions: board chair, director, independent director, committee chair, committee member, observer, corporate secretary, and administrator. Each role comes with carefully calibrated default permissions that can be customized to match your organization's specific governance requirements. Permissions control access at every level, from high-level feature access down to individual document and data field visibility. For example, a committee member may have full access to their committee's documents and meetings but only read access to full board materials, while an observer may view agendas without accessing confidential attachments. Custom roles can be created for specialized needs, such as external auditors who need temporary access to specific documents or legal counsel who requires access to resolution records. Permission changes are logged in the audit trail, and administrators can review access configurations through a visual permissions matrix that shows exactly who can access what across the entire platform.
Data Encryption & Security
Board portals handle some of the most sensitive information in any organization, from undisclosed financial results and M&A plans to executive compensation details and legal privileged communications. Preside's security architecture is designed to protect this information at every stage. All data at rest is encrypted using AES-256, the same encryption standard used by governments and financial institutions for classified information. Data in transit is protected by TLS 1.3, the latest transport layer security protocol. Database encryption, file system encryption, and application-level encryption work together to create multiple layers of protection. Preside's infrastructure operates in enterprise-grade data centers with physical security controls including biometric access, 24/7 surveillance, and redundant power and cooling systems. Application security measures include input validation, SQL injection prevention and cross-site scripting protection. Independent penetration testing, customer-managed encryption keys and customer-selectable data residency are on our roadmap and are not available today.
Identity Management And What Is Planned
Centralized identity management is a cornerstone of enterprise security, and it is the most significant gap in Preside today. Directors currently sign in with an email address and password, with optional authenticator-app multi-factor authentication on their individual account. Administrators control what each director can reach through role-based permissions, and every access event is recorded server-side with the acting user, IP address and timestamp, so access governance is auditable even without an identity provider in front of it. What is not yet built: single sign-on through SAML 2.0 or OIDC, SCIM provisioning and deprovisioning, and organization-wide enforcement of multi-factor authentication. These sit together on our roadmap because enterprise buyers rightly treat them as one capability. If your organization cannot adopt a governance platform without SSO, tell us during your evaluation rather than after, and we will be straight with you about timing.
Activity Monitoring & Audit Logs
Security is not only about preventing unauthorized access, it is also about maintaining complete visibility into authorized activity. Preside's activity monitoring system tracks every user action within the platform in real time, creating the audit log that serves both security and compliance purposes. Login events record the user identity, authentication method, timestamp, IP address, device type, and geographic location. Document activity captures views, downloads, prints, annotations, and shares with the same level of detail. Meeting actions, voting events, communication activity, and administrative changes are all logged with full context. Real-time monitoring dashboards allow security administrators to observe platform activity as it happens, with configurable alerts for suspicious patterns, such as login attempts from unusual locations, bulk document downloads, or after-hours access. For organizations with security operations centers, Preside supports SIEM (Security Information and Event Management) integration, feeding audit data into centralized security monitoring platforms. Audit logs are retained according to configurable policies that can be aligned with regulatory requirements, and all log data is tamper-protected to maintain evidentiary integrity. This comprehensive monitoring ensures that security teams have the visibility they need while governance teams have the evidence regulators demand.
Compliance Certifications & SLA
Enterprise boards require assurance that their board portal meets recognized security and compliance standards. Preside is built to support GDPR obligations for organizations with European data subjects, including data subject access, export and deletion. The platform runs on managed infrastructure whose providers hold their own SOC 2 Type II and ISO 27001 certifications. Being straight about our own position: Preside does not yet hold a SOC 2 Type II attestation of its own, has not completed an independent penetration test, and does not offer a contractual uptime SLA with service credits. Those three items are the top of our compliance roadmap, and we would rather name them during your evaluation than have procurement discover them later. If your organization requires a completed attestation before signing, tell us and we will be clear about timing.
Frequently Asked Questions
How secure is Preside's board portal?
Preside uses AES-256 encryption at rest, TLS 1.3 in transit, role-based access control, optional authenticator-app multi-factor authentication, and server-side audit logs recording the acting user, IP address and timestamp. Preside does not yet hold its own SOC 2 Type II attestation and has not completed an independent penetration test. Customer-selectable data residency and customer-managed encryption keys are on our roadmap.
What encryption does Preside use?
Preside uses AES-256 encryption for all data at rest and TLS 1.3 for all data in transit. Multiple encryption layers, database, file system, and application level, provide defense in depth. Organizations requiring full control over encryption can use customer-managed encryption keys.
Does Preside support single sign-on (SSO)?
Not yet. Directors sign in with an email address and password, with optional authenticator-app multi-factor authentication. SAML 2.0 and OIDC single sign-on, together with SCIM provisioning, are on our roadmap. If SSO is a hard requirement for your organization, raise it during your evaluation so we can be clear about timing.
What is the uptime SLA?
Preside does not currently offer a contractual SLA with uptime commitments or service credits. The platform runs on managed infrastructure with replication across availability zones and managed database backups, and we monitor availability, but we have not published formal recovery time or recovery point objectives. A formal SLA is on our roadmap. If one is a procurement requirement, raise it before subscribing.