As of 1 Nov 2026, the panel rates Miro 3.5/5 and Mural 3/5 in Online Whiteboard. Weighted by what each judge cares about, 6 of the 6 judges pick Miro and 0 pick Mural. Miro scores higher on 5 of 7 criteria (European sovereignty, Security, AI controls & deployment, Pricing transparency, plus 2 more). Mural scores higher on 2 of 7 criteria (Canvas, templates & content and Integrations, import & export). Provenance — Miro: Rest of world; Mural: Rest of world. Ratings are the AI panel’s opinion, formed from public evidence: how scores are made.
The judges split by criterion, and the split is the answer. Miro leads security and deployment 7.2 to 6.0 and sovereignty 6.0 to 3.8, 6 to 0 on each, though its sovereignty verdict splits there: the San Francisco contracting party under California law versus the published data processing agreement with Dutch-law EU Standard Contractual Clauses and "EU residency on every plan." Mural's verdict names Tactivos under California law, its listed subprocessors in the United States, and regional residency as an Enterprise-plan, workspace-by-workspace option. Mural leads canvas and content 7.0 to 6.3, 4 judges to 0, and edges integrations and export 7.0 to 6.8 (1 lean, 5 ties). Facilitation (7.2 to 7.0), access and administration (7.5 to 7.3) and pricing transparency (5.5 to 5.0, 3 leans to 3 ties) run close. Weighted totals favor Miro judge by judge, from 6.4 to 6 (skeptic) to 7.3 to 6.2 (Microsoft 365 administrator).
Choose Miro if
You need an administrator switch that blocks AI features outright — Miro's security and deployment verdict records one, and the lean there is 6 to 0 for Miro.
Your works council or public-sector review asks for a published data processing agreement with Dutch-law EU Standard Contractual Clauses and 'EU residency on every plan' — both credited in Miro's verdict; those two judges' weighted totals read 6.6 to 6.1 and 6.4 to 5.9.
You run open workshops where guests join by QR code or link without creating an account — Miro's facilitation verdict credits this, 7.2 to 7.0.
You want SAML single sign-on with SCIM provisioning available from the Business plan — Miro's verdict records this, and access and administration reads 7.5 to 7.3.
Choose Mural if
Your team's output lives on the canvas itself — canvas and content reads 7.0 to 6.3, with 4 judges leaning Mural and 0 Miro.
Your planning runs through Jira — Mural's verdict documents a two-way Jira sync down to conflict handling, and integrations and export reads 7.0 to 6.8; we found no public information on an export format for Miro.
You want to start at no cost — Mural's pricing transparency verdict lists a Free plan at $0 USD for unlimited members, three editable murals at a time.
You require bring-your-own-key encryption — Mural's security and deployment verdict records a detailed bring-your-own-key setup.
Read this comparison as one judge. Each weighs the same scores by what they care about.
The Public-Sector Project Lead
Leads the digitalisation programme of a state ministry and runs workshops with municipalities, agencies and external consultants. The data protection officer has ruled out US-hosted boards, and procurement asks for BSI C5 or an on-premises installation in the state data centre. Needs guests from other authorities without accounts, a board that works in the browser on locked-down machines, an accessibility statement, and a contract the procurement office can sign.
Miro
This judge's pick
Mural
Criterion by criterion
Canvas, templates & content
Miro
An infinite canvas, sticky notes, a library of 7,000+ templates and serious diagramming — flowcharts, ERDs, UML class and sequence diagrams on a single board, with video and audio walkthroughs embedded — cover our workshop and process-mapping needs well. We found no public information on search across boards, documented limits for large boards, or AI clustering and summarising of notes with its data use stated.
Mural
An infinite canvas with sticky notes, shapes, connectors, tables, mind maps, drawings and files is evidenced, templates number in the hundreds and can be published to our workspace for reuse, and the AI actions — generate, cluster, summarise, translate — are documented down to the model behind them. We found no public information on search across boards, documented limits for large boards, video embeds, or a statement of how the AI features use board content, so the top band is not reached.
Workshop facilitation & participation
Miro
This is close to what my workshops with other authorities need: people join by QR code or link from any device with no installs and no account required, and there is a timer, dot voting, polls, private anonymous mode, breakout frames, Bring Everyone to Me, presentation mode through frames, live reactions and locking of sections. The interactive activities are capped at up to 50 participants on Business and Enterprise, and while the vendor says the platform is built to meet enterprise accessibility standards, we found no published accessibility statement or conformance report.
Mural
Visitors join through an expiring link without an account and are asked only for a name — exactly how colleagues from other authorities would take part — and the facilitation features cover timer, voting, private mode, summon and follow, facilitator lock and hide-and-reveal on every plan, with the board running in the browser, which suits our locked-down machines. External consultants can even be granted full facilitation, though only on the Enterprise plan and only after Mural's own team enables it. The help centre documents a screen reader, keyboard shortcuts and accessible-mural guidance, but the vendor describes itself as just scratching the surface of accessibility, and we found no public information on breakout areas, stated participant limits or a published conformance report.
Integrations, import & export
Miro
Connections for over 250 tools including Slack, Confluence, Jira, Teams and Google Workspace, a REST API, Web SDK, Live Embed via iFrame, a marketplace and documented Visio and Lucidchart import give a ministry room to wire this into its landscape. The terms confirm export features exist during the term and 30 days after, but we found no public information on export formats, webhooks, or a two-way Jira sync.
Mural
The two-way Jira sync is documented in unusual detail — issues import as cards, sticky notes convert to issues, field sync and conflict handling are spelled out — and it sits alongside Asana, Linear and Rally syncs, apps for Teams, Zoom, Webex and Slack, embedding through Confluence Smart Links and Embedly, PowerPoint export and paste in both directions with spreadsheets. The REST API and the canvas embed SDK are explicitly in beta with no promise of general release, and we found no public information on import from other whiteboards or on webhooks, so moving a whole workspace out would rest on the API's beta terms.
Sharing, permissions & administration
Miro
Administration reaches the depth procurement asks for: SAML single sign-on, SCIM and just-in-time provisioning, audit logs with SIEM integration, admin roles split into company, user and content scopes, data classification with guardrails that stop high-sensitivity boards being shared publicly, retention automation and a Discovery API. Most of this, including the audit logs, sits in the Enterprise plan, and we found no public information on domain capture or transferring a leaver's boards.
Mural
Single sign-on with SAML, SCIM provisioning with a sandbox to test before rollout and the identity provider as source of truth, audit logs with SIEM support including a Splunk dashboard, guest domain restrictions, link sharing switched off at company level, eDiscovery, confidential rooms and mural ownership transfer when someone leaves cover most of what our IT and records offices check. We found no public information on domain capture of existing accounts, legal hold or data classification labels, and data retention appears only as a control name without stated rules.
Security, AI controls & deployment
Miro
Encryption in transit and at rest, customer-hosted keys via AWS Key Management Service, annual independent penetration tests, sensitive-data discovery and unusually granular AI governance — administrator blocking, provider and model choice, own API keys, AI audit trails streamed to our security tools — are documented. But the key AI controls and key management are paid Enterprise add-ons, and we found no public information on an on-premises or private-cloud edition, a stated deletion period, or a statement for works councils.
Mural
Encryption in transit and at rest is stated, and bring-your-own-key encryption is documented in real depth — our key in our own AWS KMS, revocation taking effect within fifteen minutes, and an explicit list of which content is and is not covered — alongside SOC 2 Type 2 and ISO 27001. We found no public information on an on-premises or dedicated edition, on whether administrators can switch Mural AI off, or on a statement that its GPT models do not train on customer boards; deletion on termination is described without a stated period, and with no BSI C5 among the stated certifications our procurement prerequisite of C5 or our own state data centre is not met on the public evidence.
European sovereignty
Miro
The contracting entity in the standard terms is RealtimeBoard Inc. dba Miro of San Francisco under California law and San Francisco venue — the imprint names a Berlin GmbH and an Amsterdam EU representative exists, but the data importer in the data processing agreement is the US company. EU data residency is available on every plan on AWS, subprocessors are listed with their locations, and ISO 27001 and SOC 2 are stated; the named AI, captions, email and support processors are all in the United States, and the privacy policy warns that collected data may be transferred to and processed in the United States — with our data protection officer that ends the conversation, and we found no public information on BSI C5.
Mural
The chain is transparent but entirely American: Tactivos, Inc. of San Francisco is the contracting entity under California law with venue in San Jose, every listed subprocessor from hosting and database to analytics and support sits in the United States, and the United States remains the default storage location, with regional residency only an Enterprise-plan, workspace-by-workspace option whose EU availability is not stated. A data processing agreement is published and ISO 27001 and SOC 2 are claimed, but we found no public information on an EU contracting entity or representative, BSI C5, or a self-hosted edition — my data protection officer has ruled out US-hosted boards, so this is where the evaluation ends for us.
Pricing transparency
Miro
Tiers are public with exact prices — Free at €0, Starter at €8/month per member, billed yearly, Business at €20/month per member, billed yearly — and the plan comparison unusually details inclusions such as 50 AI credits/member/month and 2,000 MCP calls per day. Enterprise is "Custom pricing—from 30 members", the add-ons we would need (key management, classification, eDiscovery, premium support, the AI blocking controls) carry no prices, and we found no public information on how guests or viewers are counted.
Mural
The Free plan at $0 USD for unlimited members with three editable murals at a time and the Business plan at 17.99 USD per member / month billed annually, with single sign-on included and visitors free on every plan, are public and clear. But the Enterprise tier — where data residency, SCIM, audit logs and bring-your-own-key live — is only "Contact for pricing", and we found no public information on the Limited and Full Member rates, AI credit prices, minimum seats or term length, so my procurement office cannot compute the annual cost without a sales call.
Sovereignty, side by side
Dimension
Miro
Mural
Legal entity
Not determined
Not determined
Hosting location
Not determined
Not determined
Hosting options
Not determined
Not determined
Open source
Not determined
Not determined
Data processing agreement
Not determined
Not determined
Transfer impact assessment
Not determined
Not determined
Facts, side by side
Only facts both products carry under the same definition — anything else would not be a fair row.
As of 1 Nov 2026, the panel rates Miro higher: 3.5/5 against 3/5. Weighted by what each judge cares about, 6 of the 6 judges pick Miro and 0 pick Mural. Which one fits depends on the criteria that matter to you; the table on this page shows both side by side, and each judge’s reading has its own page. Both were scored by the same AI bench under the same rubric, from public evidence only, as the methodology describes.
Is Miro or Mural European?
Miro is not European by provenance (Rest of world). Mural is not European by provenance (Rest of world). Provenance is read from each company’s own legal pages: who builds it and who owns it.
Where do Miro and Mural store customer data?
Per the vendors’ own pages as captured — Miro: Default not stated; pages mention the EU, the US, Australia and Japan. Mural: its pages as captured do not say.
Do Miro and Mural have a free plan?
As of 1 Nov 2026, both vendors’ own pages state a free plan. Each product page links the pricing page it was read from.