How we protect your work
My Company Whiteboard is run by IT Support 101 Inc., an IT company in Ontario, Canada. This page explains, in plain terms, what we do to keep your boards private and available. If you need more detail for a security review, contact us.
Encrypted connections
Every page, file and live update travels over HTTPS (TLS). Browsers are told never to connect without it.
Your own private space
Each organisation's boards, files and people are kept apart. Every request checks who you are and whether you're allowed, every time.
Authenticator sign-in
Anyone can add an authenticator app. On Team and Corporate, an owner can require it for everyone. Repeated failed sign-ins are slowed down.
Files scanned for malware
Every upload is scanned before it's stored, and anything harmful is refused. Pictures are re-saved, which removes hidden location data.
Guests on a short leash
Guests are named people invited to one board, for as long as you choose, as viewer, chat-only or editor. They never see the rest of your organisation.
Confidential boards
Mark a board confidential and guests can't download its files or export it, and see their name and email watermarked across it.
Audit log
Corporate plans get a log of who did what, when and from where, which owners and admins can export.
Nightly encrypted backups
Every night your data is encrypted on our server and copied to a separate storage provider. Restores are tested.
Payments handled by Stripe
Card details go straight to Stripe, a certified payment processor. We never see or store your card number.
Where your data lives
Your boards, files and account details are stored on servers in a data centre in St. Louis, in the United States, run by our hosting provider. Backups are kept, encrypted, with a separate provider, also in the United States.
We use a small number of service providers to run the service. They're listed, with what each one does, in our privacy policy and data processing agreement.
What we don't do
- No advertising, and no selling or renting your information
- No tracking or analytics scripts on the app
- Only the cookie needed to keep you signed in
- Our staff only look at your boards with your owner's permission, or when the law requires it
Reporting a problem
If you think you've found a security issue, please send us the details. We'll acknowledge it promptly and keep you updated while we look into it.