# Lucidspark — Online Whiteboard

Lucidspark by Lucid Software Inc. holds a panel rating of 3/5 from 6 AI judges (category median 3/5), as of 2026-11-01. Provenance: Rest of world; sovereignty: not determined.

- Vendor: Lucid Software Inc. (https://lucid.co/lucidspark)
- Category: [Online Whiteboard](https://whats-best.ai/software/online-whiteboard.md)
- Provenance (editorial classification): Rest of world
- Canonical page: https://whats-best.ai/software/online-whiteboard/lucidspark-whiteboard
- Alternatives: https://whats-best.ai/software/online-whiteboard/lucidspark-whiteboard/alternatives ([markdown](https://whats-best.ai/software/online-whiteboard/lucidspark-whiteboard/alternatives.md))
- Data as of: 2026-11-06 · evaluated 2026-11-01 · oldest source captured 2026-11-01

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Lucid Software Inc.
- Headquarters: Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting: Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan: Yes, per the vendor’s own page [S7]

## The panel's verdict

Lucidspark, the online whiteboard of Lucid Software Inc. of South Jordan, Utah, comes out strongest on administration and weakest on sovereignty and pricing transparency. Access and administration is the highest column at 7-8, resting on SAML single sign-on, SCIM provisioning on Enterprise accounts, domain control and verification, and Enterprise Shield with audit logs, litigation hold and customer-managed keys. Canvas and content, facilitation, integrations and export, and security and deployment all sit at 6-7, while sovereignty stands at 4 and pricing transparency at 5. No criterion spans more than a point; where those single-point gaps appear, judges cite the same absences — no public information on anonymous note modes, participant limits, named export formats or the AI vendors — and weight them differently. The sovereignty score follows from a US contracting entity, US hosting unless expressly agreed otherwise with an EU data centre only by configuration, and the Data Privacy Framework as the primary transfer mechanism; pricing transparency stalls on the Enterprise tier's Contact-sales entry and undescribed guest counting.

**Speaks for it:**
- Workshop facilitation is documented end to end — guest collaborators, breakout boards, voting sessions, timers on Team plans, a visual agenda with pre-meeting input, sharing via Slack, Zoom and Microsoft Teams.
- Two-way data sync with Jira, Azure DevOps and airfocus, whiteboard import from Miro, Mural and FigJam, and a public REST API with a developer portal and a marketplace of more than 100 custom-built integrations.
- SAML single sign-on, SCIM provisioning on Enterprise accounts and domain control and verification, extended by Enterprise Shield with audit logs, litigation hold, control of inbound and outbound external sharing and customer-managed keys via Lucid KMS.
- AI generates, sorts and summarises notes and admins can switch it off, with a stated policy that customer data is not used to train generative AI models available to third parties.
- Self-serve prices are public with VAT excluded — Free at €0 with 3 editable Lucidspark boards, Individual at €9 per month when billed yearly, Team at €10 / user per month when billed yearly.

**Held against it:**
- The Enterprise tier is Contact sales, with no public information on how guests or external participants are counted, on minimum seats or on the term, so the real annual cost is not computable from public pages.
- We found no public information on export formats — no PDF, image or CSV export is named — or on webhooks, so content exit stays vague.
- Sovereignty scores sit at 4 on a US contracting entity, US hosting unless expressly agreed otherwise with an EU data centre available only by configuration, and the Data Privacy Framework as the primary transfer mechanism.
- AI providers are identified only as unnamed vendors, with no public information on their names or locations.
- We found no public information on a private or anonymous mode for notes, on stated participant limits per session, or on an accessibility statement for the board.

**Best for:**
- You run recurring workshops and retrospectives with external guests and need breakout boards, voting sessions, timers and a visual agenda.
- Your teams live in Jira or Azure DevOps and need a two-way data sync backed by a public REST API.
- You are moving from Miro, Mural or FigJam and need documented whiteboard import.
- You will negotiate an Enterprise contract and need SAML single sign-on, SCIM provisioning, domain control, audit logs and litigation hold.

**Avoid if:**
- You need a European contracting entity, or EU data residency as the default rather than a configuration option.
- Your procurement requires a computable annual cost from public pages before any vendor contact.
- You need SCIM provisioning or whole-board content locking without an Enterprise account.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Workshop Facilitator | The Product Team Lead | The Microsoft 365 Admin | The Works Council Member | The Public-Sector Project Lead | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Canvas, templates & content | 3/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| Workshop facilitation & participation | 3/5 | 3/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 |
| Integrations, import & export | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 |
| Sharing, permissions & administration | 3.5/5 | 4/5 | 3.5/5 | 4/5 | 3.5/5 | 3.5/5 |
| Security, AI controls & deployment | 3/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 | 3/5 |
| European sovereignty | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Pricing transparency | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 |
| **Weighted verdict** | **3/5** | **3.5/5** | **3/5** | **3/5** | **3/5** | **3/5** |

### The judges

- **The Workshop Facilitator** (v1.0): Freelance facilitator and agile coach who runs three to four remote workshops a week for clients from car suppliers to city utilities, most of them with participants who have never used the tool and will not create an account. Builds the board the evening before from their own templates. Needs guests in by link, a timer, anonymous brainstorming, dot voting and a way to pull twenty people to the same frame, and a client who asks where the board is stored before the session starts.
- **The Product Team Lead** (v1.0): Leads three product teams at a logistics software company in Hamburg, with developers in Poland and Portugal. The board is where story maps, quarterly planning, architecture sketches and retrospectives happen, and the outcome has to land in Jira without anyone retyping it. Wants diagrams and sticky notes on one board, a two-way sync with the tickets, an API for the team's own automation, and an export that still makes sense when the company switches tools.
- **The Microsoft 365 Admin** (v1.0): Runs Microsoft 365 and Teams for a machine builder with 2,400 staff and found 600 free whiteboard accounts on company addresses, boards shared publicly by link among them. Has to decide between the whiteboard that comes with Teams and a licensed one. Wants single sign-on, SCIM, domain capture of the existing accounts, sharing rules set once for everyone, audit logs in the SIEM, retention rules, and an AI that can be switched off until legal has read the terms.
- **The Works Council Member** (v1.0): Sits on the works council of an insurance company and leads its IT committee, which has to agree before any tool that could show who did what goes live (§87(1) no. 6 BetrVG). Reads the admin documentation before the feature page: whether contributions and time on board are tracked per person, what a manager can see, how long logs are kept, what the AI does with retrospective notes, and where the boards are stored and by whom.
- **The Public-Sector Project Lead** (v1.0): Leads the digitalisation programme of a state ministry and runs workshops with municipalities, agencies and external consultants. The data protection officer has ruled out US-hosted boards, and procurement asks for BSI C5 or an on-premises installation in the state data centre. Needs guests from other authorities without accounts, a board that works in the browser on locked-down machines, an accessibility statement, and a contract the procurement office can sign.
- **The Skeptic** (v1.0): Has seen a free plan with "unlimited members" that locks every board after the third, "EU data residency" that covers the database but not the AI, and an export that turns two years of workshops into a stack of PNGs. Reads that a product is "enterprise-grade" and asks who can open a board shared by link, whether the boards train anyone's model, what the export keeps — and what leaving would cost.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Access review frequency: quarterly [S19]
- AI processing: Lucid AI enabled accounts: AI-accessed information processed by AI vendor [S9]
- Airfocus acquisition: airfocus GmbH [S19]
- Background checks: yes [S19]
- Backups: yes · yes [S19]
- Business continuity rto: 48 [S19]
- Certifications: SOC 2 Type II · ISO 27001 [S2]
- Certifications: SOC2 · PCI · FedRAMP Moderate · EU-U.S. Data Privacy Framework · yes [S5]
- Certifications: SOC 2 Type II · ISO 27001 · ISO 27701 · ISO 42001 · PCI merchant certification · EU-U.S. and Swiss-U.S. Data Privacy Framework · FedRAMP Certified Class C (Moderate) · CASA · IRAP Assessed at PROTECTED level [S8]
- Certifications: yes · yes [S19]
- Children age: 16 · yes [S9]
- Cookies: yes [S8]
- Data classification: AES-256 · TLS 1.2 · highest level [S8]
- Data classification: Confidential Information · yes [S19]
- Data segmentation: yes [S19]
- Disaster recovery plan: yes [S19]
- Disk encryption: yes [S19]
- DPA enterprise: Enterprise customers · yes [S8]
- Dpf adr provider: JAMS designated ADR provider for DPF issues; services at no cost [S9]
- Dpf certification: EU-U.S. DPF · UK Extension to the EU-U.S. DPF · Swiss-U.S. DPF [S9]
- Encryption: AES · 1.2 · 1.3 · 256 [S8]
- Encryption: yes · yes · yes [S19]
- Encryption at rest: AES-256 [S8]
- Enterprise shield: yes [S7]
- Fedramp: Moderate · FedRAMP Authorized [S2]
- Ftc enforcement: yes [S9]
- GDPR erasure: yes [S8]
- Gpc supported: yes · yes [S9]
- Incident response: 24x7x365 · yes [S8]
- Incident response plan: yes [S19]
- Intrusion detection airfocus exception: no [S19]
- ISO 27701: yes [S8]
- Key management: Amazon Key Management Service [S8]
- Key management: yes [S19]
- Least privilege: yes [S19]
- Log retention: 180 · 365 [S19]
- Malware protection: yes [S19]
- MFA internal: yes [S19]
- No marketing sale: yes [S9]
- Password admin controls airfocus exception: no · yes [S19]
- Penetration testing: yes · yes [S8]
- Pentest: annual · yes · 30 [S19]
- Regulatory compliance tools: yes · yes [S20]
- Sdlc: yes · yes [S19]
- Secure measures: Reasonable security measures; no absolute guarantees [S9]
- Security training: yes · yes [S8]
- Storage media disposal: yes [S19]
- Training: yes [S19]
- Trust center documents: SOC 2 · CAIQ · SIG · 30 [S8]
- Vendor assessment: yes [S19]
- Vulnerability scanning: yes · quarterly · monthly [S19]

**Data**
- Retention backups: 6 [S9]
- Retention deletion: Full removal requires permanent account deletion; retention while necessary for original purposes [S9]
- US state sale disclosure: Categories collected and disclosed; none sold/shared for cross-context behavioral advertising per chart [S9]

**Hosting**
- Cloud providers: AWS · Azure · Google Cloud Platform [S8]
- Data location: US-based; may host/process data in US and other countries [S9]
- Primary provider: AWS [S8]
- Support emails: support@lucid.co · support@airfocus.com [S19]
- Transfer mechanisms: SCCs, adequacy decisions, Binding Corporate Rules; DPF is primary mechanism for US transfers [S9]

**Integrations**
- API available: Lucid offers a developer platform with multiple APIs [S6]
- Categories: Meetings and communication · Data connectors · Google · Productivity · Microsoft · Atlassian · AI · Documentation · Enterprise architecture · External embed · Cloud visualization · Identity and license management · Task management · Strate… [S4]
- Categories: integration categories include meetings and communication, data connectors, Google, Microsoft, Atlassian, AI, external embed, cloud visualization, task management, MCP Connectors, etc. [S15]
- Count: 100 [S1]
- Count: more than 100 custom-built integrations · 100 [S2]
- Count: Google · Microsoft · Atlassian · >100 [S5]
- Custom integrations developer platform: Custom integrations via developer platform [S15]
- Developer platform custom: yes [S4]
- Embeds: Confluence · Google · Microsoft · document embeds [S2]
- Enterprise integrations: Jira Cloud · Jira Data Center · Smartsheet · Azure DevOps Cloud [S7]
- Google workspace limited use: Google Workspace API data: Limited Use, not used to train generalized AI/ML models [S9]
- Marketplace exists: yes · 113 [S4]
- Public API: Lucidchart · Lucidspark · yes · create · read · update [S8]
- Task import: Airtable · Asana · monday.com · import tasks and records as Lucid Cards [S2]
- Twoway sync: airfocus · Azure DevOps · Jira · two-way data sync [S2]
- Whiteboard import: Miro · Mural · FigJam · whiteboard file import [S2]

**Legal**
- Copyright: Lucid Software Inc. [S1]
- Copyright: 2026 · Lucid Software Inc. [S11]
- Copyright holder: 2026 · Lucid Software Inc. [S3]
- Copyright holder: Lucid Software Inc. [S2]
- Entity: Lucid Software Inc. [S19]
- GDPR controller: Lucid or airfocus is controller for account and Services data in EEA/UK [S9]
- Policy entity: Lucid Software Inc. and wholly-owned subsidiaries including airfocus GmbH [S9]
- Policy updated: 2026-02-09 [S9]
- Updated: 2026-06-23 [S19]

**Pricing**
- AI paid future: yes · yes [S7]
- Billing flexibility: yes [S7]
- Enterprise price: yes · no · yes [S7]
- Free price: 0 · yes · no [S7]
- Individual price: no · 9 [S7]
- Team price: yes · no · 10 [S7]
- Template all plans: yes [S14]
- Trial length: 7 [S7]
- Trial payment: yes [S7]
- Uptime guarantee: Enterprise · 99.9 [S8]

**Product**
- Access control model: role-based permissions [S8]
- Action items tracking: yes [S3]
- Addons: Cloud Accelerator · Process Accelerator · Enterprise Shield [S5]
- Admin configuration modes: all users · no users · admin-designated users [S17]
- Admin controls enterprise only: Lucid Enterprise accounts only · yes [S17]
- Admin visibility unlocked users: no [S17]
- Agile features: Templates · Timelines · Lucid Cards [S1]
- Agile planning: Supports sprint planning, backlog refinement, release planning, big room planning [S2]
- AI: Lucid AI [S5]
- AI capabilities: AI in Lucidspark can generate and expand ideas from text prompts, sort sticky note content, summarize canvas content, and add branches to mind maps [S2]
- AI idea generation: yes [S3]
- AI optional admin control: yes · yes [S8]
- AI sort requirements: 6 [S2]
- AI training policy: no [S8]
- API keys admin prohibitable: yes [S17]
- API keys expiration: yes · predefined or none [S17]
- API keys toggle behavior: toggle off blocks new keys and existing key auth; re-enabling restores existing keys [S17]
- Authentication: yes · yes · yes · yes [S8]
- Automation capabilities: yes · yes · yes · yes [S20]
- Breakout board embed: yes · no [S16]
- Breakout boards: yes [S3]
- Broadcast: yes [S3]
- Call recording: Calls may be recorded with notification [S9]
- Capabilities list: Visual Activities · Dynamic mind maps · AI · Lucid Cards · Dynamic Table [S1]
- Collaboration: yes · yes · yes [S11]
- Content locking: content locking makes entire board uneditable [S2]
- Cookie embed no access behavior: iframe shows request access or log in message [S16]
- Cookie embed recommendation: cookie-based embeds recommended for most use cases [S16]
- Cross account collaboration restrictable: yes · yes [S17]
- Cross account toggle limitation: deactivation only prevents new invitations, does not remove accepted collaborators [S17]
- Custom shape libraries: import and create custom shape libraries [S6]
- Data automation: Data import with auto-visualization, data linking, overlay, and refresh [S5]
- Data exfiltration protection: yes [S20]
- Data import export: import and export information from Lucid [S6]
- Dev self select control location: User feature controls · Users [S17]
- Developer controls toggle admin roles: Account Owner · Team Admin [S17]
- Developer menu capability: developer menu: test Extension API apps [S17]
- Developer portal capability: developer portal: create apps, OAuth 2.0 credentials, distribute apps [S17]
- Developer role assignment: developer role assigned in admin panel [S17]
- Developer tools default: yes [S17]
- Document access control: yes [S20]
- Document ownership: yes [S8]
- Embed auto update: yes · yes [S16]
- Embed third party cookies: yes · yes [S16]
- Enterprise governance features: domain control and verification · SAML · two-factor authentication [S8]
- Enterprise shield eligibility: Enterprise · FedRAMP Certified [S8]
- Enterprise shield guides: yes · yes · yes [S20]
- EU data center API unavailable: no [S17]
- External embeds: Embed important Lucid documents into your most used apps [S6]
- Facilitated brainstorm template: Facilitated brainstorming template with a methodical approach to ideation is available to try [S14]
- Facilitator tools: Facilitator Tools keep attendees engaged on a visual canvas [S3]
- Facilitator tools: Facilitator tools include laser pointer, take the lead, broadcast, timer, voting, private mode, show authors, lock/hide objects [S2]
- Forrester tei: 2023 Forrester Consulting Total Economic Impact study · 9700000 · 692000 · 410 [S5]
- Free board limit: 3 [S7]
- Free features: Unlimited shapes per board, freehand drawing, emoji reactions, commenting, Basic Visual Activities, Lucid AI, Presentation mode [S7]
- Free signup hero: Lucidspark is a virtual whiteboard moving from ideation to planning and building [S1]
- Govsuite default no develop: no [S17]
- Govsuite fedramp: Class C (Moderate) [S8]

**Subprocessors**
- Analytics: Google Analytics · Microsoft [S9]
- Categories: Vendors include CRM, communication, billing/payment processing, customer support, infrastructure hosting, LLMs, marketing, data enrichment, advertising, security, analytics, banking/legal/accounting/insurance [S9]
- List: yes · yes [S8]
- Payment processors: Payment information collected by third-party payment processors [S9]

**Support**
- Document access control: yes [S8]
- Kms setup: contacting Lucid support [S20]
- Privacy contact: Accessibility issues with policy: contact legal@lucid.co; policy maintained via third-party system [S9]
- Status page: status.lucid.co · yes [S8]
- Training: Testimonial claims Lucid offers trainings for customer teams [S5]

57 more facts on the canonical page: https://whats-best.ai/software/online-whiteboard/lucidspark-whiteboard

## Questions

### Is Lucidspark European?

No. whats-best.ai classifies Lucidspark as Rest of world.

### Where does Lucidspark store data?

Not stated on the vendor’s pages as of 1 Nov 2026.

### Does Lucidspark have a free plan?

Yes. Lucidspark has a free plan, per [the vendor’s page captured 1 Nov 2026](https://whats-best.ai/evidence/13880).

### What are the best alternatives to Lucidspark?

As of 1 Nov 2026, the panel rates [Miro (3.5/5)](https://whats-best.ai/software/online-whiteboard/miro-whiteboard), [Collaboard (3.5/5)](https://whats-best.ai/software/online-whiteboard/collaboard-whiteboard) and [Klaxoon (3/5)](https://whats-best.ai/software/online-whiteboard/klaxoon) highest among the other 12 Online Whiteboard products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Collaboard](https://whats-best.ai/software/online-whiteboard/collaboard-whiteboard) (UK / wider Europe). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Lucidspark alternatives](https://whats-best.ai/software/online-whiteboard/lucidspark-whiteboard/alternatives).

## What this page leaves out

- 36 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 20 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 data fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage (Lucidspark): https://lucid.co/lucidspark (checked 2026-11-01)
- [S2] Features page (virtual whiteboarding): https://lucid.co/platform/virtual-whiteboarding (checked 2026-11-01)
- [S3] Features page (facilitating meetings): https://lucid.co/lucidspark/use-cases/facilitating-meetings (checked 2026-11-01)
- [S4] Integrations page (marketplace): https://lucid.co/marketplace (checked 2026-11-01)
- [S5] Features page (enterprise): https://lucid.co/enterprise (checked 2026-11-01)
- [S6] API documentation: https://lucid.co/developers (checked 2026-11-01)
- [S7] Pricing page: https://lucid.app/pricing/lucidspark (checked 2026-11-01)
- [S8] Security / trust page: https://lucid.co/security (checked 2026-11-01)
- [S9] Privacy policy: https://lucid.co/privacy (checked 2026-11-01)
- [S10] Terms of service (legal policies): https://lucid.co/legal (checked 2026-11-01)
- [S11] Canvas, templates & content — found from sitemap: https://lucid.co/templates/mind-map-with-ai (checked 2026-11-01)
- [S12] Canvas, templates & content — found from sitemap: https://lucid.co/templates/sticky-note-mind-map (checked 2026-11-01)
- [S13] Workshop facilitation & participation — found from sitemap: https://lucid.co/templates/sprint-retrospective-lucidspark (checked 2026-11-01)
- [S14] Workshop facilitation & participation — found from sitemap: https://lucid.co/templates/facilitated-brainstorm (checked 2026-11-01)
- [S15] Integrations, import & export — found from sitemap: https://lucid.co/marketplace/lucidspark (checked 2026-11-01)
- [S16] Integrations, import & export — found from sitemap: https://lucid-developer-docs.readme.io/docs/embed-api-faqs (checked 2026-11-01)
- [S17] Sharing, permissions & administration — found from sitemap: https://lucid-developer-docs.readme.io/docs/admin-controls (checked 2026-11-01)
- [S18] Sharing, permissions & administration — found from sitemap: https://lucid-developer-docs.readme.io/reference/sharing (checked 2026-11-01)
- [S19] Security, AI controls & deployment — found from sitemap: https://lucid.co/security-program (checked 2026-11-01)
- [S20] Security, AI controls & deployment — found from sitemap: https://lucid.co/enterprise/enterprise-shield/guides/obtain-encryption-keys (checked 2026-11-01)

---

Cite as: whats-best.ai, "Lucidspark — Online Whiteboard", AI panel analysis, as of 2026-11-06. https://whats-best.ai/software/online-whiteboard/lucidspark-whiteboard

Corrections: https://whats-best.ai/correct/1247?target=page