Security & trust
Security your CISO can sign off on
Board books hold a company's most sensitive information: strategy, M&A, people. Konsaro protects them with company sign-in, fine-grained access and an activity log, stored in Switzerland and documented for your review.
- Board data stored in Zurich
- SwitzerlandBoard data stored in Zurich
- TLS in transit, encrypted at rest by our hosting provider
- EncryptedTLS in transit, encrypted at rest by our hosting provider
- Company sign-in, plus two-factor authentication
- Microsoft SSOCompany sign-in, plus two-factor authentication
- Managed database backups
- DailyManaged database backups
Controls
Answers to the three questions every review asks
Who can get in, how far the papers can travel, and what happens to the data. Your administrators set the policy; Konsaro enforces it for every director, executive and guest.
01 · Access & identity
Only the right people get in
Directors sign in with your organisation's Microsoft account. Access follows the roles and access lists your board office sets.
Company sign-in with Microsoft
Board members and executives sign in with your organisation's Microsoft account (Microsoft Entra ID). No separate board password to manage.
02 · Document protection
Board papers stay where they belong
Board books are some of the most forwarded files in any company. Decide per document how far each one can travel, without making directors' lives harder.
No forwardable attachments
Board books are shared as access in Konsaro, not as files in an inbox. Nobody outside the access list holds a copy to pass along.
03 · Data & continuity
Encrypted, recorded and recoverable
What happens behind the screen matters as much as what directors see. Board data is stored in Switzerland, key activity is logged, and backups are there when you need them.
Encrypted in transit and at rest
TLS protects data on the move. Our hosting provider encrypts board materials and related data at rest, stored in Zurich.
How we build
Security is built into every release
Not a checklist after launch. Every change to Konsaro goes through the same secure development lifecycle, and nothing ships while a critical finding is open.
- 01DesignThreat modelling
- 02BuildSecure coding & peer review
- 03TestVulnerability & dependency scans
- GateAutomated security assessment
- 05ReleaseControlled roll-out
- 06OperateMonitoring & patching
Critical or High findings block the release
Documented incident response
A defined security incident response process, from preparation to lessons learned, so everyone knows their part before anything happens.
Documentation under NDA
Security questionnaire answers are shared during your security review. Our DPA is published, and a countersigned copy is available on request. Konsaro holds no security certification yet; we are preparing for ISO 27001.
Security review
A review without the back-and-forth
Security, compliance and procurement teams get what they need up front, then a direct line to people who can answer the follow-up questions.
- 1
Start in the Trust Center
Where data lives, how AI is handled and how we work with sub-processors is public. No sales call needed.
- 2
Request the review pack
Answers to your security questionnaire and a countersigned copy of the DPA.
- 3
Walk through it together
A session with your IT, security and board office teams to close the open questions.
Trust Center
Where data lives, AI, access and what happens at contract end.
Sub-processors
What kinds of providers help run Konsaro, with what data and where.
Data Processing Agreement
The binding DPA under the revFADP and the GDPR. Countersigned copy on request.
Service status
Whether Konsaro's services can be reached right now.
Who it's for
Built for the people who sign off
Each role asks different questions. See how Konsaro answers yours.
Information security
Company identity, clear boundaries and fewer shadow copies of board books.
Learn more — Information securityCompliance & data protection
Storage in Switzerland, a published DPA and an activity log you can show.
Internal audit
Sign-ins, downloads and decisions on the record.
Security documentation and customer-specific commitments are provided during security review. Public pages describe posture, not a substitute for signed paperwork.
