Built so your company's work stays your company's.
What IT and security teams usually ask, answered plainly. If something here isn't enough, email privacy@brinkboard.com and a person answers.
TLS for everything in transit. Data encrypted at rest. Stored in the United States (Virginia).
The database itself checks every read and write. A task is visible only to the people on it.
Working toward SOC 2. Independent audit planned.
AI runs only when you use it, through Anthropic's commercial API. Your tasks don't train anyone's models.
No ad networks, no analytics SDKs, no data sales. Ever.
Who can see what
- A task is visible only to the person doing it, the person who gave it, and the person who asked for it. Nobody else, including other people at the same company.
- Row-level security is turned on for every table, so these rules are enforced by the database, not just by the app.
- Your contact list and groups are private to you. Numbers you save are kept in your account, visible only to you.
- Access to the production systems is limited to Brinkboard.ai's founder, and is used only to run and support the service.
Sign-in and accounts
- Passwords are hashed by the sign-in system. Nobody at Brinkboard.ai can read them.
- Sign-in codes are short-lived and single-use. Brinkboard.ai's emails don't carry sign-in links, so link scanners in company mail can't use them up.
- Join links sent by a coworker work once, expire in 14 days, only work for an address with no account, and are stored only as a one-way hash.
- The Brinkboard.ai connector for your AI (Claude, ChatGPT, Copilot or Gemini) uses OAuth 2.1. You sign in and approve it yourself, and it can't delete tasks. Your AI reads your email through its own connections; Brinkboard.ai never sees that inbox.
- Microsoft work accounts: Brinkboard.ai can sign people in with their company Microsoft (Entra ID) account, so your IT team controls who gets in and access ends when someone leaves. Your IT admin approves Brinkboard.ai once in Microsoft Entra; until then people use email or password sign-in.
Task links for people without an account
- Each task in a group gets its own private link, keyed by a 192-bit random code. It can't be guessed, and it never appears in server logs (it sits after the
#in the address). - A personal link opens only that person's task and a view-only copy of the group's board. It can mark that one task Done, Working or On hold, add a note, or ask a teammate for help. Nothing else.
- Opening a link changes nothing. Only a tap does, so mail link scanners can't mark work done.
- A group can also have one shared link that the organiser sends from their own email. Teammates tap their own name to update their tasks. That link goes only to the group, and the organiser can reset it at any time; the old link stops working at once.
- Every link stops working the moment the group is closed with All clear.
Activity history
For group work, Brinkboard.ai records every status change, update and hand-off: who did it, when, and whether it came from the app or a link. Group members can open the History on the group page. The record is written by the database itself, so the app can't skip or edit it. After All clear, anyone in the group can have Brinkboard.ai write an after action review from this record. It uses shared updates and any chat or email thread the group pasted in, never private notes. Pasted conversations are visible to the group and deleted with it.
How long data is kept
- A group and its tasks, notes and history are deleted automatically 30 days after the group is closed with All clear.
- Everything else stays until you delete it or delete your account.
Email replies
Each task email carries a private reply address. A reply is accepted only when the sender is on the task and the message passes their domain's DMARC check, so a forged From line is ignored. Instructions written inside an email are never followed: a reply can only add a note or mark that one task done.
Connect Outlook (email to tasks)
Off unless a person turns it on. They sign in with Microsoft and allow two permissions: Mail.Read (read their mail) and offline_access (stay connected). Brinkboard.ai does not ask to send, change or delete mail.
- About every 10 minutes, Brinkboard.ai's server reads new messages in that person's Outlook inbox, starting from when they connected. Older mail is never read.
- For each message, only the subject, the sender's name and address, and the body text go to Anthropic's Claude to decide whether it asks the person to do something. Attachments are never opened or sent.
- Brinkboard.ai keeps no copy of the email: only the suggested task (with the subject and a link back to the message, cleared when the person taps Add or Ignore) and a list of message ids already checked, so each message is checked once.
- The Microsoft sign-in (refresh token) is encrypted before it is stored, in a table only Brinkboard.ai's server can read. The app never sees it.
- Nothing is added, assigned or emailed until the person taps Add. Disconnect in Settings deletes the stored sign-in and the checked list at once.
- Work and school accounts: your IT admin may need to approve Brinkboard.ai once in Microsoft Entra (admin consent) before people can connect. You can also block it there.
Companies that handle Brinkboard.ai data
Only these, and only to run the service. Each publishes its own security reports (such as SOC 2 Type II) on its trust page.
| Company | What for | Data |
|---|---|---|
| Supabase | Database, sign-in, server functions | All account and task data. AWS us-east-1 (Virginia). |
| Netlify | Serves the website and app | Standard web request logs |
| Resend | Sends Brinkboard.ai's email and receives task replies (on Amazon Web Services) | Recipient address and message content |
| Anthropic | AI features, only when you use them | The text you send it (listed in the privacy policy). Not used for training. |
| Microsoft | Connect Outlook, only for people who turn it on | Reads new inbox mail through Microsoft Graph; Brinkboard.ai stores an encrypted sign-in token |
| Apple | iPhone app: payments, notifications, Siri and speech | Subscription status, device token, spoken words |
| ImprovMX and Google | Deliver email you send to support@ and privacy@ | Only the messages you send us |
Your data, your call
- Export: Menu, then Download my data, gives you a file of your tasks, people, groups and settings.
- Delete: Menu, then Delete account, removes the account right away. Open tasks someone gave you go back to them.
- No lock-in: we don't delete or hold data hostage if you stop paying.
For IT: what to allow
If your mail filter or network blocks Brinkboard.ai, these are the addresses it uses:
- Website and app:
brinkboard.com - Data and sign-in:
xdiiugelihicrzwdlhor.supabase.co - Email from
noreply@brinkboard.com, signed with SPF, DKIM and DMARC - Task replies go to
*@reply.brinkboard.com
If Brinkboard.ai's email can't get through, nothing stops. Text it, WhatsApp it, or email it once: if company mail blocks us, it goes out from you, like any message from a colleague. People can also sign in with a password, or with a Microsoft work account once your IT approves Brinkboard.ai.
Links: each person's link opens only their own job and is the only way to change it. Opening a link changes nothing, so mail scanners can't mark anything done. The group board link is view only. When a job is handed on (once), the new owner gets a new link and the old one can only watch. All clear closes every link for that group.
What we don't claim
Brinkboard.ai is a small company. It doesn't hold its own SOC 2 or ISO certificate yet; it is built on providers that do. Brinkboard.ai is not covered by HIPAA and is not for patient health information: please keep patient names and medical details out of tasks, notes and messages. If your company needs a security questionnaire or a data processing agreement, ask. We'll tell you straight what we can do today.
Company
Brinkboard.ai is run by Brinkboard LLC (Florida).
Email privacy@brinkboard.com with “Security report” in the subject. We'll reply within two business days and won't take action against good-faith research.