whats-best.ai
Search Sign in

Online Whiteboard · head-to-head

Conceptboard vs Miro

As of 1 Nov 2026, the panel rates Conceptboard 3/5 and Miro 3.5/5 in Online Whiteboard. Weighted by what each judge cares about, 0 of the 6 judges pick Conceptboard and 6 pick Miro. Conceptboard scores higher on 2 of 7 criteria (European sovereignty and Pricing transparency). Miro scores higher on 5 of 7 criteria (Sharing, permissions & administration, Integrations, import & export, Canvas, templates & content, plus 2 more). Provenance — Conceptboard: EU-Made; Miro: Rest of world. Ratings are the AI panel’s opinion, formed from public evidence: how scores are made.

Conceptboard

EU-Made

Panel rating

Sovereignty: not determined

Full evaluation →

Miro

Rest of world

Panel rating

Sovereignty: not determined

Full evaluation →

The short answer

The lean splits by criterion. Miro is ahead on canvas and content (6.3 vs 4.5), facilitation (7.2 vs 5.8), integrations and export (6.8 vs 4.3) and access and administration (7.5 vs 4.8), with six judges leaning Miro and none leaning Conceptboard on each. Conceptboard is ahead on sovereignty (8.0 vs 6.0, six lean Conceptboard) and pricing transparency (6.2 vs 5.5, four lean Conceptboard, two tie). Security and deployment is the open split: three judges lean Miro, three tie. The weighted totals are higher for Miro for the workshop facilitator (6.6 vs 5.3), product team lead (6.8 vs 5.8), M365 admin (7.3 vs 5.6), works-council member (6.6 vs 6.4), public-sector judge (6.4 vs 6.0) and skeptic (6.4 vs 5.8). The verdicts themselves split, too — Miro on sovereignty (5 to 7), Conceptboard on pricing transparency (5 to 7) — and the Conceptboard verdict reports different figures across captured pages for third-country transfers.

Choose Conceptboard if

  • Sovereignty decides the purchase: six judges lean Conceptboard on sovereignty (8.0 vs 6.0), and its verdict rests the score on a German contracting entity, hosting in the Frankfurt region on named IONOS and AWS infrastructure, a published data processing agreement, and ISO 27001, 27017 and 27018.
  • You need an air-gapped deployment: the Conceptboard verdict documents a self-hosted Data Center Edition that runs fully air-gapped.
  • Your procurement wants documented hosting choices in Germany: the verdict names hosting on IONOS and AWS in the Frankfurt region, with IONOS or STACKIT as paid options.
  • You must state your costs up front: four judges lean Conceptboard on pricing transparency, where its verdict records published tiers and concrete free-plan limits — alongside 'additional fee' add-ons and unexplained guest counting.

Choose Miro if

  • Guests must join without accounts: six judges lean Miro on facilitation (7.2 vs 5.8), and its verdict documents joining by QR code or link with no account.
  • Your team needs SAML single sign-on and SCIM provisioning: the verdict has SAML starting on the Business plan, with SCIM provisioning and Enterprise audit-to-SIEM, and six judges lean Miro on access and administration (7.5 vs 4.8).
  • Integration breadth decides the buy: six judges lean Miro on integrations and export (6.8 vs 4.3), though the captured pages give different figures for its integration count (over 160 on one, 250+ on others).
  • You need canvas basics on day one: six judges lean Miro on canvas and content (6.3 vs 4.5), and we found no public information on sticky notes, freehand drawing or connectors in the captured Conceptboard pages.
  • An administrator must be able to block AI outright: the Miro verdict documents this control, and on security and deployment three judges lean Miro with three ties (7.2 vs 6.5).

Read this comparison as one judge. Each weighs the same scores by what they care about.

The Microsoft 365 Admin

Runs Microsoft 365 and Teams for a machine builder with 2,400 staff and found 600 free whiteboard accounts on company addresses, boards shared publicly by link among them. Has to decide between the whiteboard that comes with Teams and a licensed one. Wants single sign-on, SCIM, domain capture of the existing accounts, sharing rules set once for everyone, audit logs in the SIEM, retention rules, and an AI that can be switched off until legal has read the terms.

Conceptboard

Miro

This judge's pick

Criterion by criterion

Canvas, templates & content

Conceptboard

The template story is genuinely strong for my users: a pre-built library for workshops and retrospectives, team templates on the higher plans, templates I can adapt to the organisation, files from Google Drive, OneDrive and Dropbox on the board, plus kanban, backlogs and Gantt-style timelines with task management. But the captured pages say almost nothing about the canvas itself — we found no public information on sticky notes, freehand drawing or pen input, an infinite canvas, frames, search across boards, or any AI that clusters or summarises — so I cannot confirm the fundamentals I would be migrating people onto. Documented limits (100 objects per board on the free plan, unlimited on paid) are the only scale statement offered.

Miro

The captured pages describe an infinite canvas with sticky notes, 7,000+ templates, flowcharts, ERDs and UML and sequence diagrams on one board, embedded video and audio walkthroughs, and comments with tagging on any element. We found no public information on tables, kanban, mind maps, search across boards, large-board limits, or AI clustering with its data use stated.

Workshop facilitation & participation

Conceptboard

Live moderation to guide the audience through content, a timer, voting, presenting section by section, guest contributors with temporary access for externals, and the board running inside Microsoft Teams and Webex — that covers most of running a session from our Teams calls. An external audit by Materna in July 2025 against EN 301 549 and BITV 2.0 found the application partially compliant (not all PDFs accessible, no templates marked accessible), which is more accessibility evidence than most vendors publish. We found no public information on anonymous or private brainstorming modes, breakout areas, participant limits per session, or voting results export.

Miro

Guests join by QR code or link with no account and no installs, there is a private and anonymous mode, a timer, dot voting and polls with instant results, breakout frames, bring-everyone-to-me, presentation mode through frames, locking of diagram sections, and boards running inside Teams meetings, with participant limits stated (up to 50 for Engage activities) and an accessibility claim. A published conformance report and session summaries with their data use stated would be needed to go higher.

Integrations, import & export

Conceptboard

Teams, Webex, Google Drive, OneDrive, Dropbox and Confluence embedding are named, and a Jira integration reflects tickets and status directly on the board — workable for a Microsoft estate, though the Jira link is not described as a two-way sync. Export is described only as the option to fully export or delete my data, either automatically or on request, with no format named, and the API appears only as a passing mention of programmatic access in the terms of use. We found no public information on Slack or Zoom apps, PDF, image or CSV export formats, imports from other whiteboards, webhooks, or a documented REST API.

Miro

A documented REST API, a JavaScript web SDK, Live Embed via iFrame, oEmbed, a marketplace with private apps, over 250 corporate tools, Jira and Confluence, Microsoft 365 with Teams, and Visio and Lucidchart import are all shown. Export is thin in the capture: the terms promise export "using the export features described in the Documentation" within 30 days of term end, but no PDF, image or CSV export, no editable-format export and no webhooks are described.

Sharing, permissions & administration

Conceptboard

Single sign-on via SAML 2.0 and OAuth 2.0 is offered (shown as an additional fee, with Entra ID explicitly named among the identity providers for the self-hosted edition), permissions are role-based down to individual files, boards and projects, guest contributors are tiered, and audit logs plus advanced admin controls arrive with the Corporate plan. What I need to absorb our 600 shadow accounts is not on these pages: we found no public information on SCIM provisioning, domain capture of existing accounts, centrally enforced sharing rules such as banning public links, exporting audit logs to a SIEM, retention rules or legal hold. Audit log retention of up to 180 days appears in the privacy policy, which is a start but not an administration story.

Miro

SCIM and just-in-time provisioning, SAML single sign-on demonstrated with Microsoft Entra ID, Company/User/Content admin roles, central internal and external sharing controls, guardrails that stop high-sensitivity boards being shared publicly, audit logs with SIEM integration, automated retention, eDiscovery and classification labels are all evidenced, with single sign-on from the Business plan and audit-to-SIEM Enterprise-only. The captured pages do not show domain capture of existing shadow accounts, nor transfer of boards when a person leaves.

Security, AI controls & deployment

Conceptboard

Encryption is stated concretely (TLS 1.2 with 256-bit AES GCM, elliptic curve cryptography and forward secrecy in transit; symmetric AES256 at rest), full deletion of data is offered with stated log retention periods, penetration tests run under a bug bounty programme with a summary report available on request, and deployment is the strong suit — a dedicated server option and a self-hosted, fully air-gapped Data Center Edition delivered as a Kubernetes bundle with customer-controlled updates. However, we found no public information on customer-managed encryption keys, data loss prevention, or any AI features whatsoever — so I have nothing to evaluate against our rule that AI stays switched off until legal has read the terms, and no statement on whether board content trains models.

Miro

256-bit AES at rest and TLS 1.3 in transit, customer-managed encryption keys hosted in the customer's own AWS account, AI an administrator can block completely on boards at chosen classification levels, prompt blocking and moderation filters, AI providers named with locations (Anthropic and ElevenLabs in the United States), AI data handling and training restrictions, discovery of PII, PCI and PHI on boards, and permanent deletion on account deletion are all stated. We found no public information on an on-premises or private-cloud edition, on what managers can see of individual activity, or on works council materials.

European sovereignty

Conceptboard

The contracting entity is Conceptboard Cloud Service GmbH in Halle (Saale), registered at Amtsgericht Stendal, with German law governing, the software developed in Germany, boards hosted in German data centres on named infrastructure (IONOS and AWS in the Frankfurt region, with IONOS CLOUD or STACKIT as choices), a data processing agreement linked in the legal footer, ISO 27001, 27017 and 27018 stated, and a documented on-premises edition that keeps every board on our own servers. The privacy policy lists subprocessors by name and discloses third-country providers such as Vimeo, Meta, Google, Twitter/X and YouTube with EU Standard Contractual Clauses or adequacy decisions as the safeguard, and self-hosted Matomo with truncated IPs for analytics. That is a properly evidenced European chain — the third-country website-side providers with stated safeguards are what keeps it shy of an end-to-end European one.

Miro

The contracting entity is RealtimeBoard Inc. of San Francisco, with a Berlin affiliate named in the imprint that an order may identify and an EU representative in Amsterdam; EU data residency is on every plan on named AWS infrastructure, and a published data processing agreement with Standard Contractual Clauses, Data Privacy Framework certification and audit rights covers transfers. The listed subprocessors for AI, captions, email and support — Anthropic, ElevenLabs, Braze and Gainsight — are all United States, and the privacy policy warns that data may be transferred to and processed in the US, which keeps this short of the top levels.

Pricing transparency

Conceptboard

Starter at 5€ / user / month, Advanced from 10€ / user / month on a 12-month contract for 10+ users, Corporate & Government from 14€ / user / month on 24 months for 100+ users, free-plan limits spelled out (3 active boards, 100 objects per board, 250 MB storage), and VAT treatment, monthly-versus-yearly billing, auto-renewal, the 90-day notice period and even the yearly inflation adjustment are all public. What blocks a full cost computation: single sign-on is listed only as an additional fee with no amount, the IONOS and STACKIT hosting options carry unspecified additional fees, Special Plans are on request, the self-hosted Data Center Edition has no public price, and how guest contributors are counted against licences is not explained.

Miro

Free at €0, Starter at €8/month per member, billed yearly, and Business at €20/month per member, billed yearly, are public together with per-tier limits such as 50 AI credits per member per month, MCP calls per day, and the plan gating of single sign-on and audit-to-SIEM; Enterprise is custom pricing from 30 members, and classification, key management, lifecycle management and eDiscovery appear only as unpriced "Paid add-on". Guest and viewer counting, free-plan board limits and VAT treatment are not described, so the real annual cost cannot be computed from public pages alone.

Sovereignty, side by side

Dimension Conceptboard Miro
Legal entity Not determined Not determined
Hosting location Not determined Not determined
Hosting options Not determined Not determined
Open source Not determined Not determined
Data processing agreement Not determined Not determined
Transfer impact assessment Not determined Not determined

Facts, side by side

Only facts both products carry under the same definition — anything else would not be a fair row.

Compliance · Certifications ISO 27001 · ISO 27017 · ISO 270181

captured 1 Nov 2026 · Report an error

compliant · compliant · certified · ready2

captured 1 Nov 2026 · Report an error

Compliance · DPA yes3

captured 1 Nov 2026 · Report an error

yes4

captured 1 Nov 2026 · Report an error

Compliance · GDPR yes5

captured 1 Nov 2026 · Report an error

yes6

captured 1 Nov 2026 · Report an error

Compliance · GDPR compliant yes3

captured 1 Nov 2026 · Report an error

yes · GDPR7

captured 1 Nov 2026 · Report an error

Compliance · ISO 27001 ISO 27001 · yes8

captured 1 Nov 2026 · Report an error

certified9

captured 1 Nov 2026 · Report an error

Legal · Contracting entity IT.NRW · Govdigital10

captured 1 Nov 2026 · Report an error

RealtimeBoard Inc. dba Miro4

captured 1 Nov 2026 · Report an error

Legal · Entity name Conceptboard Cloud Service GmbH11

captured 1 Nov 2026 · Report an error

RealtimeBoard, Inc. dba Miro12

captured 1 Nov 2026 · Report an error

Legal · Governing law German law governs, excluding UN CISG and international private law13

captured 1 Nov 2026 · Report an error

California law; venue San Francisco, California4

captured 1 Nov 2026 · Report an error

Pricing · Free tier personal use · yes13

captured 1 Nov 2026 · Report an error

yes9

captured 1 Nov 2026 · Report an error

Pricing · Starter price Starter · 51

captured 1 Nov 2026 · Report an error

Starter · EUR · yearly · 814

captured 1 Nov 2026 · Report an error

Product · Access control Need-to-know principle; access rights regularly checked and withdrawn15

captured 1 Nov 2026 · Report an error

multi-factor authentication · role-based access control · single sign-on · just-in-time privileged access16

captured 1 Nov 2026 · Report an error

Product · Accessibility yes · yes10

captured 1 Nov 2026 · Report an error

yes17

captured 1 Nov 2026 · Report an error

Product · SSO SAML 2.0 · OAuth 2.03

captured 1 Nov 2026 · Report an error

yes · Okta · Azure AD · Google SSO18

captured 1 Nov 2026 · Report an error

Product · Templates templates for workshops, meetings, and brainstorming sessions19

captured 1 Nov 2026 · Report an error

7000+9

captured 1 Nov 2026 · Report an error

Product · Vulnerability management anti-virus / anti-malware · vulnerability scanning · threat notification advisories · patch management15

captured 1 Nov 2026 · Report an error

yes · yes18

captured 1 Nov 2026 · Report an error

Support · Help center yes20

captured 1 Nov 2026 · Report an error

yes21

captured 1 Nov 2026 · Report an error

Support · Trust center yes20

captured 1 Nov 2026 · Report an error

yes7

captured 1 Nov 2026 · Report an error

Questions about Conceptboard and Miro

Which is better, Conceptboard or Miro?

As of 1 Nov 2026, the panel rates Miro higher: 3.5/5 against 3/5. Weighted by what each judge cares about, 0 of the 6 judges pick Conceptboard and 6 pick Miro. Which one fits depends on the criteria that matter to you; the table on this page shows both side by side, and each judge’s reading has its own page. Both were scored by the same AI bench under the same rubric, from public evidence only, as the methodology describes.

Is Conceptboard or Miro European?

Conceptboard is European (EU-Made). Miro is not European by provenance (Rest of world). Provenance is read from each company’s own legal pages: who builds it and who owns it.

Where do Conceptboard and Miro store customer data?

Per the vendors’ own pages as captured — Conceptboard: Default not stated; pages mention Germany. Miro: Default not stated; pages mention the EU, the US, Australia and Japan.

Do Conceptboard and Miro have a free plan?

As of 1 Nov 2026, both vendors’ own pages state a free plan. Each product page links the pricing page it was read from.