01 · Hosted by us
Pro or Business
Hosted by us, with users included. Not open to new customers right now; the prices stay on the pricing page. Every control on this page is included.
from $9 per user a month
Currently unavailable
Security and control
Your data. Your controls. Visible in your console.
The controls IT and finance ask about are built in on every plan, not sold as add-ons: a database of your own, encrypted backups you can download, support that needs your approval, and an audit log you can read. Run it on our hosting, on servers for you alone, or on your own.
Every site has its own database and encrypted backups from day one
- A database of your ownEach site keeps its records in its own database, never mixed with another company's.
- Encrypted daily backupsStored away from the app server. Restore or download one whenever you need it.
- Support only with your approvalNo standing access. Time-limited, visible to your team, and logged.
- An audit log you can readConsole and support actions, in a log that shows if anything was altered.
On every plan
Six controls, on every plan, in detail.
Not a checklist of promises: each one is something you can open in your console and see working.
-
A database of your own
Every site keeps its records in a database of its own and its files apart from every other site's. Nothing is shared with another company, and a backup of your site contains your data only.
-
Encrypted daily backups
Taken every day and before every app install or update, encrypted, and stored away from the server that runs your site. Restore one, or download it, from the console at any time. Kept for the days your plan says.
-
Support only with your approval
Our support engineers have no standing access to your site. One asks for a session and gives a reason; an owner or admin approves or denies it. A session ends after 4 hours at most, or as soon as you end it.
-
Visible while it runs
While a support session is open, everyone on your site sees a banner that says so. The session, who opened it and when it ended all go to the audit log, so there is never a question of who looked at what.
-
Tamper-evident audit log
Console actions, support sessions and member changes are written to a log where each entry is linked to the one before it. If an entry were altered or removed, the chain would show it.
-
Two-factor and single sign-on
Two-factor sign-in on every plan, switched on for the roles you choose. On Business, Advanced and Enterprise, your people sign in to your sites through your company's identity provider, and you can make it the only way in.
Support access
Can our support team see your data? Only when you let them.
Here is exactly what happens when you ask us for help with something inside your site.
- Request. A named support engineer asks for a session and writes the reason.
- Approval. An owner or admin approves or denies it in the console. Nothing opens before that.
- Session. Time-limited to 4 hours at most; your team sees a banner; you can end it any time.
- Record. The request, the decision, the session and its end are in your audit log.
Sign-in
Two-factor on every plan. Your identity provider from Business up.
Ask the people on your sites to confirm sign-in with a second factor, on every plan: you choose the roles it applies to. On Business, Advanced and Enterprise, your people sign in to your sites through the identity provider your company already uses, with the roles you map to their groups, and you can switch password sign-in off.
- Roles by group: a person's role on each site follows the group they are in.
- Switch password sign-in off, so access follows your identity provider.
- Break-glass sign-ins: the accounts you name keep a password with two-factor, for the day the identity provider is down, and every use emails you.
Leaving with your data
Your data is yours. Take it with you, whenever you like.
Owners and admins can download a backup of any site from the console at any time, and export any list to Excel or CSV. If you cancel, your sites stay readable for 16 days so your team can move, then they are paused and archived with a final backup.
- Download a backup of a site, any day, from the console.
- Export any list to Excel or CSV, with the filters you have set.
- Readable for 16 days after cancelling, with export and backups still working.
Run it your way
One platform. Three ways to run it.
Advanced on servers for your company alone, run by us, or Enterprise on your own servers: the same platform, the same apps and the same controls.
02 · Infrastructure of your own
Advanced
Your own environment on servers for your company alone, still run by us. Talk to us about a size and a region: we set it up with you and send a voucher code that activates it in the console. Updates are applied only when you confirm them.
from $499/month
Talk to us
03 · On your servers
Enterprise
Run Nexoboard in your own data centre or with a cloud provider you choose, with a one-command installer, an online licence, single sign-on and priority support. Your data stays on your servers. You manage its licences from the console.
Contact us for pricing
Talk to us
| What | Pro or Business | Advanced | Enterprise |
|---|---|---|---|
| Who runs the servers | Nexoboard, shared hosting | Nexoboard, on servers for you alone | You, on your own servers |
| Where your data lives | Our hosting, in a database of your own | Your own environment, in the region you choose | Your servers |
| Backups | Daily, encrypted, kept for the days your plan says | Daily, encrypted, kept 90 days | Yours to run, on your servers |
| Updates | Applied by us, with a backup first | Only when you confirm them in the console | You run them, when you choose |
| Support access | Only with your approval | Only with your approval | No access from us |
| Sign-in | Two-factor; identity provider on Business | Two-factor; identity provider included | Two-factor; identity provider included |
| Licence | Users included, monthly or yearly | Per size, monthly | Per instance and per user, checked online; your sites keep working read-only if we cannot be reached for a while |
| Your own logic in code | Browser scripts by the AI Builder; nothing of yours runs on the server | Written by the AI Builder, switched on after automatic checks | Written by the AI Builder, switched on after automatic checks |
Swipe the table sideways to see every column.
Questions
What IT asks first.
Plain answers. Anything else, or a security questionnaire to fill in: write to us.
Can your support team see our data?
Only when you let them. A support engineer asks for a session on a site and gives a reason; an owner or admin approves or denies it in the console.
The session ends after 4 hours at most, or as soon as you end it, your team sees a banner while it runs, and everything goes to the audit log.
Can we export our data and leave?
Yes. Owners and admins can download a backup of any site from the console at any time, and export any list to Excel or CSV.
If you cancel, your sites stay readable for 16 days so your team can move, then they are paused and archived with a final backup.
Who applies updates, and when?
On Pro and Business, we apply platform releases, and app updates reach your sites in a maintenance window we announce first, with a backup taken before each site is updated. Your own fields, workflows and reports are kept.
An Advanced environment is updated only after its owner confirms the update in the console, for the next maintenance window or at once; we never apply one for you. On your own servers with Enterprise, you run the update when you choose.
How does the AI Builder work, and is it safe?
You describe what you need; AI proposes a set of changes, which Nexoboard checks against your site before you see it. You read the proposal, switch between versions and apply it when you are happy.
A snapshot is kept before every change, and you can undo. AI never changes your site without a person applying the change.
What happens if we stop paying?
A site that is cancelled or unpaid turns read-only first, then it is paused, archived and deleted after the notice periods. You can download a backup while the site is read-only or paused, and its final backup after it is archived.
Can we run code of our own?
On Advanced and Enterprise, the AI Builder writes server scripts at your owner's request. Before a script it wrote is switched on, it is compiled, checked against the functions the platform allows, kept from asking to ignore permissions, from calling other sites and from sending its AI answers anywhere but your records, and run once on a sample record with nothing saved. Some platform functions read or write records without checking the user's permissions, as in any script, so review what a script does before you apply it. A script you edit by hand is your own code: only scripts that call AI are checked again when you save them.
On every plan with AI, the AI Builder can also write browser scripts for your forms (Client Scripts), checked against the functions the desk allows; they run with the permissions of the person using the form.
Nobody at Nexoboard reviews the code: your company is responsible for what it asks for. You can switch off one script, its AI calls or all custom AI at any time, and undo the change in the AI Builder's history. Pro and Business run none of your code on the server.
Keep exploring
See what runs on this foundation.
Controls you can see, from your first day.
Every site gets its own database and encrypted backups from day one. Create your account, open the console and look.
Questions before you choose a plan? Write to support@nexoboard.com