# Conceptboard — Online Whiteboard

Conceptboard by Conceptboard Cloud Service GmbH holds a panel rating of 3/5 from 6 AI judges (category median 3/5), as of 2026-11-01. Provenance: EU-Made; sovereignty: not determined.

- Vendor: Conceptboard Cloud Service GmbH (https://conceptboard.com)
- Category: [Online Whiteboard](https://whats-best.ai/software/online-whiteboard.md)
- Provenance (editorial classification): EU-Made
- Canonical page: https://whats-best.ai/software/online-whiteboard/conceptboard-whiteboard
- Alternatives: https://whats-best.ai/software/online-whiteboard/conceptboard-whiteboard/alternatives ([markdown](https://whats-best.ai/software/online-whiteboard/conceptboard-whiteboard/alternatives.md))
- Data as of: 2026-11-06 · evaluated 2026-11-01 · oldest source captured 2026-11-01

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Conceptboard Cloud Service GmbH
- Headquarters: Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting: Default not stated; pages mention Germany [S7]
- Free plan: Yes, per the vendor’s own page [S11]
- Starting price: “5€ / user / month Starter” (vendor’s words) [S6]

## The panel's verdict

Conceptboard is an online whiteboard from Conceptboard Cloud Service GmbH of Halle (Saale). Its strongest category is sovereignty, scored 8 throughout, resting on a German contracting entity, hosting in Germany on named infrastructure — IONOS and AWS in the Frankfurt region, with IONOS or STACKIT as paid options — a published data processing agreement, ISO 27001, 27017 and 27018, and a self-hosted Data Center Edition that runs fully air-gapped; the captured pages still give different figures for third-country transfers, and several subprocessor locations are unstated. Security and deployment follows at 6 to 7. The weakest categories are integrations and export at 4 to 5 — full export is promised with no formats named and the API appears only as a mention of programmatic access — and canvas and content, also 4 to 5, where a template library and Kanban and Gantt views are documented without the canvas basics such as sticky notes, freehand drawing and connectors. Judges split on pricing transparency, scored 5 to 7: published tiers and concrete free-plan limits against "additional fee" add-ons and unexplained guest counting.

**Speaks for it:**
- Sovereignty evidence runs from a German contracting entity and German hosting on named infrastructure to an air-gapped, self-hosted Data Center Edition
- Security is documented in technical detail — TLS 1.2 with AES-256 GCM in transit, AES-256 at rest, ISO 27001/27017/27018 recertified in March 2025, and penetration tests under a bug bounty
- Facilitation tools are named — live moderation, timer, voting, section-by-section presentations, and boards running inside Teams and Webex meetings
- Pricing publishes Starter at 5€ / user / month, Advanced from 10€ / user / month and Corporate & Government from 14€ / user / month, with free-plan limits of 3 active boards and 100 objects per board
- Access rights are assignable per file, board and project, with SAML 2.0 / OAuth 2.0 single sign-on and audit logs at the Corporate tier

**Held against it:**
- Export is promised only as fully exporting or deleting your data, with no formats named and the API mentioned only as programmatic access in the terms
- We found no public information on canvas basics — sticky notes, freehand drawing, shapes and connectors — or on search across boards
- Single sign-on and the IONOS or STACKIT hosting options are marked "additional fee" without amounts, Special Plans are "on request", and guest contributor counting is unexplained
- We found no public information on SCIM provisioning, centrally enforced sharing policies, domain capture, or board transfer when a person leaves
- The accessibility audit reports partial compliance, with none of the templates marked accessible and not all PDFs accessible

**Best for:**
- You need a German-law contracting party, hosting in Germany on named infrastructure and an air-gapped on-premises edition for a regulated or public-sector deployment
- You facilitate workshops and retrospectives inside Microsoft Teams or Webex and want a template library plus timer, voting and live moderation
- You plan work directly on the board — Kanban boards, backlogs, sprint planning and Gantt-style timelines with Jira tickets reflected on the canvas
- You buy through public-sector channels — the vendor is available via Marktplatz Deutschland Digital (formerly DVC) with EVB-IT contracting

**Avoid if:**
- You need a structured exit path — the pages promise full export or deletion without naming any export format
- You must compute the complete annual cost before committing — add-ons such as single sign-on and the German hosting options carry unspecified "additional fee" amounts and Special Plans are "on request"
- You require accessible templates and documents today — the July 2025 audit reports partial compliance with no templates marked accessible
- You depend on a documented API or two-way Jira synchronisation — the Jira link is described as reflecting tickets on the board rather than keeping cards and issues aligned

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Workshop Facilitator | The Product Team Lead | The Microsoft 365 Admin | The Works Council Member | The Public-Sector Project Lead | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Canvas, templates & content | 2.5/5 | 2.5/5 | 2/5 | 2/5 | 2/5 | 2.5/5 |
| Workshop facilitation & participation | 2.5/5 | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 |
| Integrations, import & export | 2/5 | 2.5/5 | 2/5 | 2.5/5 | 2/5 | 2/5 |
| Sharing, permissions & administration | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2/5 | 2.5/5 |
| Security, AI controls & deployment | 3/5 | 3.5/5 | 3/5 | 3.5/5 | 3.5/5 | 3/5 |
| European sovereignty | 4/5 | 4/5 | 4/5 | 4/5 | 4/5 | 4/5 |
| Pricing transparency | 2.5/5 | 3.5/5 | 3.5/5 | 3/5 | 3/5 | 3/5 |
| **Weighted verdict** | **2.5/5** | **3/5** | **3/5** | **3/5** | **3/5** | **3/5** |

### The judges

- **The Workshop Facilitator** (v1.0): Freelance facilitator and agile coach who runs three to four remote workshops a week for clients from car suppliers to city utilities, most of them with participants who have never used the tool and will not create an account. Builds the board the evening before from their own templates. Needs guests in by link, a timer, anonymous brainstorming, dot voting and a way to pull twenty people to the same frame, and a client who asks where the board is stored before the session starts.
- **The Product Team Lead** (v1.0): Leads three product teams at a logistics software company in Hamburg, with developers in Poland and Portugal. The board is where story maps, quarterly planning, architecture sketches and retrospectives happen, and the outcome has to land in Jira without anyone retyping it. Wants diagrams and sticky notes on one board, a two-way sync with the tickets, an API for the team's own automation, and an export that still makes sense when the company switches tools.
- **The Microsoft 365 Admin** (v1.0): Runs Microsoft 365 and Teams for a machine builder with 2,400 staff and found 600 free whiteboard accounts on company addresses, boards shared publicly by link among them. Has to decide between the whiteboard that comes with Teams and a licensed one. Wants single sign-on, SCIM, domain capture of the existing accounts, sharing rules set once for everyone, audit logs in the SIEM, retention rules, and an AI that can be switched off until legal has read the terms.
- **The Works Council Member** (v1.0): Sits on the works council of an insurance company and leads its IT committee, which has to agree before any tool that could show who did what goes live (§87(1) no. 6 BetrVG). Reads the admin documentation before the feature page: whether contributions and time on board are tracked per person, what a manager can see, how long logs are kept, what the AI does with retrospective notes, and where the boards are stored and by whom.
- **The Public-Sector Project Lead** (v1.0): Leads the digitalisation programme of a state ministry and runs workshops with municipalities, agencies and external consultants. The data protection officer has ruled out US-hosted boards, and procurement asks for BSI C5 or an on-premises installation in the state data centre. Needs guests from other authorities without accounts, a board that works in the browser on locked-down machines, an accessibility statement, and a contract the procurement office can sign.
- **The Skeptic** (v1.0): Has seen a free plan with "unlimited members" that locks every board after the third, "EU data residency" that covers the database but not the AI, and an export that turns two years of workshops into a stack of PNGs. Reads that a product is "enterprise-grade" and asks who can open a board shared by link, whether the boards train anyone's model, what the export keeps — and what leaving would cost.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- 2FA: 2-factor authentication and encryption [S6]
- Access control: yes · yes [S7]
- Accessibility audit: 2025-07 · Materna Information & Communications SE · EN 301 549 · BITV 2.0 [S12]
- Accessibility barrier pdfs: no [S12]
- Accessibility barrier templates: 0 [S12]
- Accessibility feedback contact: support@conceptboard.com [S12]
- Accessibility partial compliance: partially compliant [S12]
- Accessibility standard: BGG · BITV 2.0 · Directive (EU) 2016/2102 [S12]
- Accessibility statement language: German [S12]
- Audit cadence: yes · yes [S7]
- Audits: yes · yes [S16]
- Certifications: ISO 27001 · ISO 27017 · ISO 27018 [S6]
- Data location: Germany · IONOS [S16]
- DPA: yes [S3]
- DPA: yes [S16]
- DPA availability: yes · Data Processing Agreement (DPA) · data deletion policy · technical and organisational measures [S7]
- DPA available: yes [S4]
- DPA available: AVV (data processing agreement) linked in legal footer [S14]
- DPA signed copy: yes [S8]
- DSGVO: yes [S15]
- Encryption: yes [S4]
- Encryption: 256-bit AES · 256-bit AES [S7]
- Encryption: 256-bit AES data-at-rest encryption [S6]
- Encryption at rest: 256-bit AES [S4]
- Encryption at rest: symmetric · AES256 [S8]
- Encryption in transit: 256-bit AES GCM · elliptic curve cryptography · forward secrecy · 1.2 [S8]
- GDPR: yes · yes · Germany [S1]
- GDPR: yes [S4]

**Data**
- Access: no · explicit grant for support request [S16]
- Export deletion: yes · yes · yes [S7]
- Matomo ip truncation: yes [S10]
- Matomo retention: 186 [S10]
- Retention contact enquiries: 3 [S10]
- Retention contract data: 10 [S10]
- Retention server logs: 28 · 180 [S10]
- Retention statistics: 25 [S10]
- Third country transfers: EU Standard Contractual Clauses or adequacy decision (Articles 44–49 GDPR) or consent [S10]

**Hosting**
- Cloud option: Germany · yes [S5]
- Data center edition: Data Center Edition hosting option [S14]
- Data centers: Frankfurt, Germany · IONOS · AWS [S8]
- Dedicated server option: yes [S5]
- Germany: Germany [S1]
- Germany: Germany [S16]
- Governance: IT.NRW · Marktplatz Deutschland Digital (formerly DVC) · Conceptboard GmbH [S15]
- Location: Germany [S4]
- Options: yes [S4]
- Provider: Germany · IONOS [S15]
- Providers: IONOS CLOUD · STACKIT [S16]
- Residency options: Germany (AWS) · Germany (IONOS) - additional fee · Germany (StackIT) - additional fee [S6]
- Server location: Germany · yes [S7]
- Third country transfer: no [S7]

**Integrations**
- Atlassian confluence: Atlassian Confluence · embed whiteboards into knowledge base [S3]
- Atlassian confluence: iFrame embed · yes [S4]
- Dropbox: Dropbox · integrate content into whiteboard [S3]
- Dropbox: yes [S4]
- Existing tools: Integrations with existing tool landscape [S1]
- Google drive: Google Drive · embed files into whiteboard [S3]
- Google drive: yes [S4]
- Jira: yes [S2]
- Ldap: yes [S5]
- Microsoft teams: Microsoft Teams · start whiteboard sessions from Teams [S3]
- Microsoft teams: yes [S4]
- One drive: One Drive · add files to board [S3]
- One drive: yes [S4]
- SSO: Entra ID / Azure · ADFS · Keycloak · Google Workspace · SAML 2.0 [S5]
- Teams webex: MS Teams · Webex [S6]
- Webex: Webex · use within Webex meetings [S3]
- Webex: yes [S4]

**Legal**
- Address: Halle (Saale) · Mansfelder Str. 56 · Germany [S3]
- Address: 06108 · Halle (Saale) · Mansfelder Str. 56 · Germany [S4]
- Address: 06108 · Halle (Saale) · Mansfelder Str. 56 · Germany [S7]
- Address: Mansfelder Str. 56, 06108 Halle (Saale), Germany [S6]
- Address: Mansfelder Str. 56, 06108 Halle (Saale), Germany [S5]
- Address: 06108 · Halle (Saale) · Mansfelder Str. 56 · Germany [S16]
- Commercial register: Amtsgericht Stendal · HRB 29184 [S9]
- Contracting entity: IT.NRW · Govdigital [S15]
- Controller: Conceptboard Cloud Service GmbH · Mansfelder Str. 56, 06108 Halle (Saale), Germany [S10]
- Development location: Germany [S7]
- DPA: yes [S1]
- Entity: Conceptboard Cloud Service GmbH · Mansfelder Str. 56, 06108 Halle (Saale), Germany [S8]
- Entity: Conceptboard Cloud Service GmbH · Mansfelder Str. 56, 06108 Halle (Saale), Germany · Germany [S11]
- Entity name: Conceptboard Cloud Service GmbH [S4]
- German precedence: yes [S10]
- Governing law: German law governs, excluding UN CISG and international private law [S11]
- Language: German version prevails over translated version [S8]
- Language precedence: yes [S11]
- Mdd launch: IT-Planungsrat · FITKO · 2025-03-27 · Deutsche Verwaltungscloud [S15]
- Office stuttgart: Stuttgart · Hermannstr. 5A · Germany · 70178 [S9]
- Provider name: Conceptboard Cloud Service GmbH [S9]
- Registered address: Halle (Saale) · Mansfelder Str. 56 · Germany · 06108 [S9]
- Responsibility: Landesbetrieb Information und Technik NRW [S15]
- Supervisory authority: State Commissioner for Data Protection of Saxony-Anhalt [S10]
- VAT id: DE338007583 [S9]

**Pricing**
- Advanced contract: yes · 10 · 12 [S6]
- Advanced price: Advanced · 10 [S6]
- Anonymous content deletion: yes [S11]
- Cancellation free: Free service cancellable anytime via Delete Account function [S11]
- Cancellation paid: 90 · none [S11]
- Corporate contract: 100 · 24 · yes [S6]
- Corporate price: Corporate & Government · 14 [S6]
- Customer logo usage: Vendor may use customer name and logo in customer list and website [S11]
- Fees due: yes [S11]
- Flexible switching: packages can be changed or extended at any time [S6]
- Free tier: personal use · yes [S11]
- Free trial: free trial offered [S2]
- Inflation adjustment: Annual price adjustment permitted, based on German consumer price index, with at least four weeks advance notice [S11]
- Net prices: yes · MDD Cloud-Service-Portal [S15]
- Nonprofit discounts: special conditions for NGOs and educational institutions [S6]
- Paid tier: commercial use, teams and closed user groups · yes [S11]
- Payment methods: credit card · invoice (depending on business model) [S6]
- Special plans on request: Special Plans · on request [S6]
- Starter billing: 1 · monthly · yearly [S6]
- Starter price: Starter · 5 [S6]
- Subscription auto renewal: yes [S11]
- Trial: 30 · yes [S6]
- Trial: yes · yes [S16]
- VAT: prices subject to VAT at statutory rate · yes [S6]

**Product**
- Access control: yes · yes [S1]
- Access control: Need-to-know principle; access rights regularly checked and withdrawn [S8]
- Access management: yes [S3]
- Accessibility: yes [S1]
- Accessibility: yes · yes [S15]
- Account activation: account activation usually immediate [S6]
- Active projects: 5 · unlimited · unlimited [S6]
- Admin access: VPN with end-to-end encryption, separate management networks, 2FA, logging [S8]
- Administration expert series: Expert series for public administration with concrete use cases [S14]
- Advanced features: Advanced: team templates, unlimited projects, board history, approval process, admin controls, custom branding, 1 TB storage [S6]
- Advanced hosting option: Advanced: optional IONOS or StackIT hosting [S6]
- Air gapped mode: yes [S5]
- Annotations tasks comments: Tasks, comments and annotations give traceable communication [S13]
- Authentication: yes · yes · yes [S16]
- Availability: percent · over · 99.9 [S16]
- Availability disclaimer: No guarantee of 100% availability [S11]
- Backup: cold standby redundant · German region · automated · daily full backup · AES256 · 2 [S8]
- Brevo hosting locations: OVH France · OVH Germany · Google Cloud Belgium [S10]
- Browser based: yes [S15]
- Bug bounty: yes [S4]
- Bug bounty: yes [S16]
- Closed network operation: Operation in a closed network possible [S5]
- Cloud hosting no infrastructure: Fully managed cloud hosting; no customer infrastructure needed [S16]
- Clustering feedback: visual structures, clusters, comments, and feedback on the board [S2]
- Comments collaboration: free visualization, commenting, and collaborative editing [S2]
- Confluence embedding: yes [S13]
- Content deletion after cancellation: User content may be deleted after cancellation [S11]

**Subprocessors**
- Applicant management: Personio · Applicant management [S10]
- Captcha: Trust Captcha · Captcha service (contact form protection) [S10]
- Help center: Hubspot · Help Center/support [S10]
- Hosting: ALL-INKL · Hosting & infrastructure [S10]
- Payments: Adyen (PSP) · billwerk (Subscription) · Bookings/payments [S10]
- Web development: Friendventure · Web development/design [S10]
- Webinars: Livestorm · Webinars/training (opt-in) [S10]

**Support**
- Advanced email: Advanced: email support [S6]
- Bug bounty: yes [S1]
- Channels: email · phone [S16]
- Channels by plan: email support from Advanced; email & phone from Corporate [S6]
- Corporate priority: Corporate: priority support via email and phone [S6]
- Corporate SLA: SLA included for Corporate & Government [S6]
- Enterprise individual offers: customized enterprise solutions: SSO, dedicated support, individual integrations [S6]
- Enterprise SLA: Enterprise Service Level Agreement (SLA) [S4]
- Help center: yes [S1]
- Onboarding: technical integration · data protection consulting · team training · yes [S7]
- Registration portal: procurement · tendering offices · IT · project leads [S15]
- Remote installation support: yes [S5]
- Self service help center: yes [S6]
- Service status: yes [S1]
- SLA: yes · yes [S5]
- Starter support: Starter: self-service support [S6]
- Training success team: training & customer success team for onboarding and adoption [S14]
- Trial: yes [S15]
- Trust center: yes [S1]

141 more facts on the canonical page: https://whats-best.ai/software/online-whiteboard/conceptboard-whiteboard

## Questions

### Is Conceptboard European?

Yes. whats-best.ai classifies Conceptboard as EU-Made.

### Where does Conceptboard store data?

The default storage location for customer data is not stated on the vendor’s pages as of 1 Nov 2026. The vendor’s pages mention Germany as hosting location, per [the vendor’s page captured 1 Nov 2026](https://whats-best.ai/evidence/13692).

### Does Conceptboard have a free plan?

Yes. Conceptboard has a free plan, per [the vendor’s page captured 1 Nov 2026](https://whats-best.ai/evidence/13706).

### What are the best alternatives to Conceptboard?

As of 1 Nov 2026, the panel rates [Miro (3.5/5)](https://whats-best.ai/software/online-whiteboard/miro-whiteboard), [Collaboard (3.5/5)](https://whats-best.ai/software/online-whiteboard/collaboard-whiteboard) and [Klaxoon (3/5)](https://whats-best.ai/software/online-whiteboard/klaxoon) highest among the other 12 Online Whiteboard products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Collaboard](https://whats-best.ai/software/online-whiteboard/collaboard-whiteboard) (UK / wider Europe). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Conceptboard alternatives](https://whats-best.ai/software/online-whiteboard/conceptboard-whiteboard/alternatives).

## Head-to-head

- [Conceptboard vs Miro](https://whats-best.ai/compare/conceptboard-whiteboard-vs-miro-whiteboard.md)
- [Conceptboard vs Collaboard](https://whats-best.ai/compare/collaboard-whiteboard-vs-conceptboard-whiteboard.md)

## What this page leaves out

- 31 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 6 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 4 hosting facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 legal fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 5 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://conceptboard.com/ (checked 2026-11-01)
- [S2] Features page: https://conceptboard.com/features-functions/ (checked 2026-11-01)
- [S3] Features page (meetings and workshops): https://conceptboard.com/use-case-meetings-and-workshops/ (checked 2026-11-01)
- [S4] Features page (enterprise): https://conceptboard.com/enterprise/ (checked 2026-11-01)
- [S5] Features page (on-premises edition): https://conceptboard.com/on-premises/ (checked 2026-11-01)
- [S6] Pricing page: https://conceptboard.com/pricing/ (checked 2026-11-01)
- [S7] Security / trust page: https://conceptboard.com/data-security/ (checked 2026-11-01)
- [S8] Security / trust page (technical measures): https://conceptboard.com/security-measures/ (checked 2026-11-01)
- [S9] Legal notice: https://conceptboard.com/imprint/ (checked 2026-11-01)
- [S10] Privacy policy: https://conceptboard.com/privacy-policy/ (checked 2026-11-01)
- [S11] Terms of service: https://conceptboard.com/terms-of-use/ (checked 2026-11-01)
- [S12] Workshop facilitation & participation — found from sitemap: https://conceptboard.com/accessibility/ (checked 2026-11-01)
- [S13] Workshop facilitation & participation — found from sitemap: https://conceptboard.com/use-case-remote-collaboration/ (checked 2026-11-01)
- [S14] Sharing, permissions & administration — found from sitemap: https://conceptboard.com/de/verwaltungs-use-cases-boardbasiert/ (checked 2026-11-01)
- [S15] Sharing, permissions & administration — found from sitemap: https://conceptboard.com/de/deutsche-verwaltungscloud-conceptboard/ (checked 2026-11-01)
- [S16] Security, AI controls & deployment — found from sitemap: https://conceptboard.com/cloud-hosting/ (checked 2026-11-01)
- [S17] Security, AI controls & deployment — found from sitemap: https://conceptboard.com/security-hall-of-fame/ (checked 2026-11-01)
- [S18] Data processing agreement (dpa) — found from the homepage: https://conceptboard.com/data-processing-agreement/ (checked 2026-11-01)

---

Cite as: whats-best.ai, "Conceptboard — Online Whiteboard", AI panel analysis, as of 2026-11-06. https://whats-best.ai/software/online-whiteboard/conceptboard-whiteboard

Corrections: https://whats-best.ai/correct/1239?target=page