Plain-language pilot data handling.

What the pilot needs

BoardCurrent needs only redacted working copies required to prepare the agreed pre-meeting financial review. Typical inputs are a current balance sheet, income-and-expense or budget-to-actual report, check and transaction registers, redacted receivable and payable aging reports, selected general-ledger detail, the adopted budget or a prior-period package, and relevant manager notes.

Bank statements are not requested for the initial pilot. BoardCurrent does not need or request bank credentials, accounting-system credentials, payment-card information, owner Social Security or tax-identification numbers, or remote access to customer systems.

Customer redaction

Before transfer, remove owner names and contact information; replace unit identifiers in receivable detail with non-identifying labels or provide aggregate aging totals; and remove bank-account numbers, tax IDs, credentials, card details, violation details, and unrelated personal information. Aggregate association financial figures may remain when needed for the brief.

If BoardCurrent detects information outside the agreed scope, processing stops and a replacement redacted copy is requested.

Transfer

Pilot copies are transferred over HTTPS using a unique Microsoft OneDrive for Business Request files link for each customer. The link is upload-only: uploaders cannot view, download, edit, or delete folder contents. It expires within seven days and is revoked after the expected files arrive.

Processing and storage

Pilot copies are processed locally in a dedicated BoardCurrent standard-user profile on a founder-controlled Windows device. The current pilot application stores working copies, extracted content, and outputs within that separated local profile.

The processing device uses verified BitLocker encryption, automatic Windows security updates, active Microsoft Defender malware protection, and a password-protected five-minute inactivity lock. The BoardCurrent Microsoft 365 account uses multi-factor authentication.

AI and service providers

The current pilot generator does not send document contents to an external AI API. Microsoft 365 OneDrive for Business receives and stores encrypted transfer copies and provides the upload-only request link. No other person or processor currently receives pilot content.

This statement will be updated before any additional AI, analytics, or document-processing provider is allowed to receive customer content.

Human access

Pilot content can be accessed only by BoardCurrent founder Lingfeng Zhou for producing, quality-checking, supporting, or deleting the agreed deliverables. BoardCurrent does not sell pilot content, use it for advertising, or use customer content to train or improve a shared model.

Retention and deletion

Working copies, extracted content, generation records, and local draft outputs are scheduled for deletion 30 calendar days after delivery unless an earlier date is agreed in writing. Final deliverables are retained beyond that date only if the customer requests it in writing and agrees to a separate retention date.

The process covers uploaded files and the application database for the selected association. Customer-specific exports and active OneDrive transfer copies are also checked and deleted. The dedicated BoardCurrent profile does not use a local backup or an additional sync service.

Deleted OneDrive for Business items may remain recoverable in Microsoft's recycle-bin system for up to 93 days unless the administrator changes the setting. A customer may request earlier active-data deletion at hello@boardcurrent.com. BoardCurrent confirms completion in writing and identifies the remaining Microsoft recovery-window expiry date.

Incident contact

Report suspected unauthorized access or disclosure immediately to security@boardcurrent.com. BoardCurrent will investigate, contain the issue, preserve necessary records, and notify affected customers as required by the applicable circumstances and law.

Limits

No transmission or storage method is risk-free. The pilot reduces exposure through data minimization, customer redaction, restricted access, and limited retention. Customers remain responsible for keeping authoritative original records and deciding what information they are authorized to provide.