Key Takeaways
General counsel and legal teams must prove more than what a board decided. They must show how the board reached that decision. They also need proof of who saw the papers, and proof of when someone changed the records.
Board portal software gives them this proof. It replaces email attachments and shared drives with one secure platform. The platform distributes board papers, captures approvals and keeps an audit record of governance activity.
The Economic Crime and Corporate Transparency Act 2023 now requires directors and persons with significant control to verify their identity. The 2024 UK Corporate Governance Code now asks listed boards to declare on their internal controls. Both laws create new record keeping demands for legal teams.
Why do legal teams need dedicated board portal software?
Legal teams need dedicated board portal software because standard office tools cannot show who accessed, reviewed, approved or changed a board document. This gap creates legal exposure as governance rules tighten.
Legal teams sit at the centre of governance work. They keep statutory registers up to date. They coordinate board papers. They also advise on duties under the Companies Act 2006.
Email threads and shared drives cannot give a solid record of version control or access history. A board portal keeps every draft, comment, approval and final version in one system. It also keeps a time stamped log of who opened, edited or signed each document.
What risks does email create for board level legal documents?
Email is one of the most common ways attackers get into UK organisations. Board papers sent by email carry that same risk.
The UK government’s Cyber Security Breaches Survey 2025/26 found that 43% of UK businesses had a cyber security breach or attack in the past year. The Department for Science, Innovation and Technology produced this survey. Phishing was the most common cause.
Board papers attract attackers because they often hold unpublished financial results, litigation strategy, deal terms and personal data about directors. Once someone emails or downloads a board pack to a personal device, the legal team can rarely confirm it has been deleted.
A board portal reduces this risk as it controls who can access each document. It stores data in encrypted form rather than as local copies. It also lets the legal team cut off a lost device’s access straight away.
How does board portal software help general counsel meet the 2024 UK Corporate Governance Code?
Board portal software helps general counsel meet the 2024 UK Corporate Governance Code. It creates a clear, searchable record of the internal control monitoring the Code now expects boards to show.
The Financial Reporting Council published the revised Code on 22 January 2024. Most of the Code applies to financial years starting on or after 1 January 2025. The new rule on internal controls applies to financial years starting on or after 1 January 2026.
Premium listed companies report on a comply or explain basis. Under the new rule, the board must show how it checked its controls during the year. A simple statement is no longer enough.
What does the 2024 Code require on internal controls?
The 2024 Code asks the board to declare in its annual report whether its material controls worked well during the year. These controls cover finance, operations, reporting and compliance.
General counsel and company secretarial teams usually gather the evidence behind this declaration. They draw on board minutes, committee papers, risk registers and assurance reports.
A board portal supports this work by linking committee papers and minutes so staff can search them easily. It also tracks follow up actions. This means the team can rebuild the evidence trail quickly if a regulator, auditor, shareholder or investor asks for it.
How does the Economic Crime and Corporate Transparency Act 2023 affect what legal teams must record?
The Economic Crime and Corporate Transparency Act 2023 makes identity verification a legal requirement for director and PSC filings. Getting this wrong now carries criminal liability, not just an administrative fine.
Since 18 November 2025, Companies House has required identity verification for all new director appointments and new persons with significant control. Existing directors and PSCs get a 12 month transition period. They must usually verify their identity by their company’s first confirmation statement after that date.
An unverified person cannot be included in a filing. Companies risk a fine of up to £5,000. They also risk being struck off the register if verification is missing when a confirmation statement is due.
This rule creates a new tracking job for general counsel. Legal teams now need to record identity verification status alongside director and PSC changes. It helps to track this in the same system used to manage board membership and papers.
What security features should general counsel require from a board portal provider?
General counsel should ask for four things before approving a board portal provider. These are encryption of data at rest and in transit, detailed permission controls, a full and exportable audit log, and a confirmed data storage location.
Legal teams should also check whether the provider can promise UK or EU data storage. This matters because it affects the company’s own duties under UK GDPR.
Remote wipe matters for the same reason email is risky. A portal that cannot cut off access from a lost device offers little more protection than an email attachment.
It also helps to ask how the provider handles retention and deletion. General counsel may need to keep records for as long as the law requires, then remove them once that period ends.
How does a board portal support litigation readiness and regulatory audits?
A board portal supports litigation readiness. It keeps a record made at the time, one that cannot be altered without leaving a trace, of what the board knew and when it knew it. Courts and regulators often ask for this evidence first.
In disclosure exercises, litigation, governance disputes or regulatory investigations, the drafts and approvals behind a board paper can matter as much as its final content.
When board papers live in a portal rather than email, legal teams can show a clear audit trail. It shows who saw a document and when they approved it. It also shows what changed between versions, without anyone digging through old inboxes.
What should legal teams check before selecting a board portal?
Legal teams should check four things before choosing a board portal. These are data storage location, audit trail depth, integration with existing company secretarial records, and the provider’s own security certificates.
It also helps to test how the system handles a joiner or a leaver. Director and PSC changes now need fast updates because of the identity verification rules under the Economic Crime and Corporate Transparency Act 2023.
Finally, ask how easily the system exports board papers and minutes. A system that locks in records makes future audits, investigations or provider changes harder, not easier.
Conclusion
Board portal software has moved from a governance convenience to a practical legal requirement.
UK regulation keeps tightening. The 2024 Corporate Governance Code now asks for an internal controls declaration. The Economic Crime and Corporate Transparency Act now asks for identity verification. Together, these rules mean general counsel need a system that gives clear, defensible evidence of how the board made and recorded its decisions.
A dedicated board portal builds that evidence in from the start. Legal teams no longer need to rebuild it after the fact.
How Convene supports general counsel and legal teams
Convene gives legal and company secretarial teams one secure platform. It handles board papers, approvals and the audit trail that UK governance rules now expect.
It replaces email attachments and shared drives with encrypted storage and detailed permissions. A full activity log sits behind everything, ready to produce quickly for an audit, investigation or regulatory request.
To see how Convene fits your team’s workflow, book a demo.
Frequently Asked Questions
Is board portal software necessary for private companies or only listed companies?
Board portal software is not just for listed companies. The 2024 UK Corporate Governance Code applies only to premium listed companies. But the Economic Crime and Corporate Transparency Act 2023 applies to companies of all types, including Companies House identity verification. This means the record keeping benefits of a board portal reach well beyond the listed sector.
What happens if a director is not identity verified with Companies House?
Companies House cannot include an unverified director in company filings from 18 November 2025 onward. The company can also face a fine of up to £5,000, or removal from the register, if verification is outstanding when a confirmation statement is due.
Does a board portal replace the need for a company secretary?
No. A board portal supports the company secretary and legal team. It centralises papers and keeps an audit trail. It does not replace the judgement, statutory duties or governance advice that a company secretary or general counsel provides.
