Share this article:

Key Takeaways

  • Board portal software replaces paper board packs and email attachments with one secure system for agenda planning, minutes management, action item tracking, and audit trail records.
  • Section 248 of the Companies Act 2006 requires directors' minutes to be kept for at least ten years, so electronic records with a clear time stamp make this duty easy to prove.
  • The 2024 UK Corporate Governance Code's Provision 29, in force from 1 January 2026, asks boards to maintain audit trails that prove their material internal controls, including data security, are working.
  • The DSIT Cyber Security Breaches Survey 2025/2026 found that 43% of UK businesses had a cyber breach in the past year, while only 25% had a formal incident response plan.
  • The Governance Market Survey 2026 found that 93% of governance professionals use or explore AI, while 74% reported rising workload, showing why secure board management software matters in 2026.

Board portal software is a secure platform for company secretaries and governance professionals. It replaces paper board packs and email attachments with one encrypted system. This system holds board papers and minutes together, stored as electronic records in one place.

UK company secretaries are moving to board management software fast. Two things are driving this change. New rules ask boards to prove strong data security. Cyber risk is also rising.

This article explains what board portal software does. It covers agenda planning, minutes management, action item tracking, and audit trail features. It also covers what UK law expects from board records, and what to check before you choose a platform in 2026.

What is board portal software?

Board portal software is a secure, cloud-based tool. It helps company secretaries manage board papers and minutes in one place. These platforms offer a wide range of tools built for governance work, not general office use.

Board members open papers on a laptop, tablet, or mobile device. They no longer need a printed pack or an email attachment. Team members can sign documents inside the same platform through electronic signatures.

Most platforms share common features. These include agenda planning, minutes management, electronic voting, digital signature tools, and a full audit trail. The audit trail records who viewed each document and when, with a precise time stamp. Action item tracking assigns each task a clear owner and a due date, so nothing gets forgotten between meetings.

Agenda planning tools let a company secretary set out agenda items in order and link each one to its supporting papers. This keeps the whole board pack organised before the meeting even starts.

Board portal software solves two long-running problems. First, it protects sensitive board papers once they leave the company secretary’s hands. Second, it proves who saw which version of a document if a decision is challenged later.

Why are UK boards moving away from paper board packs and email attachments?

UK boards are dropping paper board packs and email attachments for a simple reason. Both create security gaps that regulators no longer accept.

Paper packs cannot be recalled once printed and once a board member has a paper copy, there is no way to update it or take back access. This is a real problem when a paper changes right before a meeting.

Email is not much safer because a forwarded message or a hacked inbox can expose confidential board material in seconds. There is no way to pull that document back once it has gone.

What does the Companies Act 2006 require for board minutes?

Section 248 of the Companies Act 2006 sets a clear rule. Every company must record minutes of all director meetings and keep them for at least ten years.

Failure to comply is a criminal offence. Any officer in default can face a fine on summary conviction.

This rule places a direct legal duty on the company secretary. In most companies, this person handles minutes management and record storage. Some board portals have real-time minute-taking and can automatically sync votes and attendance. This makes the legal duty far easier to prove than a paper minute book kept in an office.

How has the 2024 UK Corporate Governance Code changed governance expectations?

The Financial Reporting Council (FRC) published the 2024 UK Corporate Governance Code on 22 January 2024. It applies to accounting periods starting on or after 1 January 2025.

The Code adds a new rule, Provision 29. This asks boards to declare that their material internal controls work well. Provision 29 took effect on 1 January 2026, so it is now a live requirement, not a future one.

This raises the bar for governance teams. Boards must now show proof, not just make a claim. They need clear evidence that document security and granular permissions work as intended, alongside solid record keeping. This is why many company secretaries now choose systems that build an audit trail automatically, rather than relying on scattered email records.

What cyber security risks does board portal software reduce?

Board portal software cuts cyber security risk by moving board papers out of email inboxes. Email remains a common way for attackers to reach an organisation’s most confidential information.

The government’s Cyber Security Breaches Survey 2025/2026 backs this up. The Department for Science, Innovation and Technology (DSIT) and the Home Office produce this survey each year. It found that 43% of UK businesses had a cyber security breach or attack in the past 12 months. Phishing was the most common and most damaging attack type.

Board-level responsibility for cyber security is also rising. It now sits at 31% of businesses, up from 27% the year before. This shows that more boards see cyber governance as their own job, not just an IT task.

Only 25% of UK businesses have a formal incident response plan. Yet 81% say they tell directors or trustees once a breach happens.

This gap matters, and a board portal helps close it. Features such as access logs and granular permissions give governance teams a clear, structured response instead of a scramble, backed up by role based access control. Board portals also keep an audit log of every login, so security teams can spot unusual activity fast.

What happens to board papers after a data breach?

Once a breach happens, most UK boards get involved fast. According to the DSIT survey, 81% of businesses tell directors or trustees right away.

This puts the company secretary close to the response, even if the breach did not start in the boardroom. Board papers often hold an organisation’s most sensitive material. This can include unpublished strategy and pay decisions.

An encrypted portal limits the damage. Granular permissions and role based access control mean a lost device or a hacked email account exposes far less.

What features should a company secretary check before choosing a board portal?

A company secretary should check several features before choosing board portal software. Do not judge a platform on how easy it looks to use alone.

Check the encryption standard for data at rest and in transit. Check for offline access, so team members can work without a live connection. Look for built-in agenda planning, minutes management, action item tracking, and electronic voting tools. Ask for proof of independent security accreditation.

Does board portal software need to work offline?

Yes, board portal software needs offline access. Board members often travel to meetings without reliable internet access, and losing papers mid-meeting defeats the point of going digital.

A platform that only works online brings back the same unpredictability paper was meant to solve. Look for offline sync that updates automatically once a connection returns. This should work well on a mobile device as well as a laptop.

What security accreditation should a board portal hold?

A board portal should hold ISO/IEC 27001 certification, at minimum. This is the international standard for information security management, set by the International Organization for Standardization.

This certification means an independent auditor has checked the provider’s security controls. This gives a company secretary a real answer when a board or an auditor asks how the platform protects board information.

How does an audit trail support compliance with the UK Corporate Governance Code?

An audit trail gives a company secretary a time stamp for every board paper. It shows when a paper was issued and when it was approved.

This is exactly the evidence Provision 29 asks for. A board must show its material internal controls work, including information security and record keeping.

Without this record, a company secretary must rebuild events from memory or old email threads. That is a weak position if a control is ever questioned. A platform built to maintain audit trails removes this risk.

How is artificial intelligence changing the governance profession in the UK?

Artificial intelligence is changing the UK governance profession fast. The Governance Market Survey 2026 found that 93% of governance professionals now use AI tools, or are exploring them, within their team.

The Core Partnership and the Chartered Governance Institute UK & Ireland (CGIUKI) produced this survey. It drew on 971 governance professionals across the UK. The two organisations launched it at the CGIUKI Governance 2026 conference in July 2026.

The same survey found two more things. It found that 65% of respondents said the governance function’s influence is growing. It also found that 66% said supporting high level decision-making and board information quality is becoming more important.

Is AI reducing or increasing workload for company secretaries?

AI adoption seems to increase workload right now, not reduce it. The Governance Market Survey 2026 found that 74% of respondents saw a rise in workload over the past year.

It also found that 42% of governance teams feel under-resourced for their current job. Board portal software can help close this gap. Built-in tools such as searchable meeting archives, real time updates, action item tracking, and ready-made minute templates cut repetitive admin work for busy teams.

Board Governance Technology is Becoming Standard Practice

Board governance technology is becoming standard practice across the UK. Fewer boards now treat it as optional.

The 2024 UK Corporate Governance Code now asks boards to prove their internal controls work, under Provision 29. The DSIT Cyber Security Breaches Survey 2025/2026 shows that board-level accountability for cyber security is rising, while formal incident response planning still lags behind.

Governance workload is also growing faster than governance resourcing, according to the Governance Market Survey 2026. Together, these facts show a clear shift. Paper packs and email attachments are becoming rare in UK governance in 2026, not the norm. Board portal software has moved from a nice extra to a core part of good, long term governance practice.

How Convene supports UK company secretaries and governance teams

Convene is a secure board portal built for company secretaries and governance professionals. It brings agenda planning, minutes management, action item tracking, electronic voting, and electronic signatures into one system.

Convene also gives every team member granular permissions and role based access control. This lets you control exactly who can view or edit each board paper. A full audit trail and time stamp record every action, so you always have proof of what happened and when.

This gives governance teams the kind of record that the 2024 UK Corporate Governance Code and the Companies Act 2006 both expect.

If you want to see how Convene fits your board’s own workflow, book a demo and we will walk you through it.

Frequently Asked Questions

Is board portal software legally required in the UK?

No single UK law names board portal software as a legal must-have. But the duties it helps you meet are legal requirements.

Section 248 of the Companies Act 2006 says every company must keep directors’ meeting minutes for at least ten years. Listed companies must also show, under the 2024 UK Corporate Governance Code’s Provision 29, that their internal controls work. A board portal is a practical tool for meeting these duties, not a legal requirement on its own.

How much does board portal software cost for a UK company?

There is no single fixed price for board portal software. Cost depends on your number of board members and the modules you choose.

Providers usually charge per organisation or per user, on an annual licence. The best way to compare cost is to ask providers for a quote based on your own board size and needs.

What is the difference between a board portal and a shared drive such as SharePoint?

A board portal is built for governance work, while a shared drive is a general file storage tool. This is the main difference between the two.

A board portal usually includes meeting agendas, minutes management linked to each paper, electronic signatures for resolutions, and granular permissions. It also keeps a full audit trail for compliance reporting. A general file-sharing tool does not offer these features as standard.

Do board portals help with compliance under the UK Corporate Governance Code?

Yes, a board portal helps you meet the UK Corporate Governance Code. It gives you the time-stamped proof that Provision 29 asks for.

The audit trail records when each paper was issued and approved. This gives a company secretary real evidence to support the board’s declaration, instead of digging through old emails.


Share this article:

Aika Cabales
Aika Cabales

  • Connect:
  • Email Account

Subscribe to the Convene blog

Get regular updates on Governance and Digital Transformation!

(+44) *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.