# Mural — Online Whiteboard

Mural by Tactivos, Inc. dba Mural holds a panel rating of 3/5 from 6 AI judges (category median 3/5), as of 2026-11-01. Provenance: Rest of world; sovereignty: not determined.

- Vendor: Tactivos, Inc. dba Mural (https://www.mural.co)
- Category: [Online Whiteboard](https://whats-best.ai/software/online-whiteboard.md)
- Provenance (editorial classification): Rest of world
- Canonical page: https://whats-best.ai/software/online-whiteboard/mural-whiteboard
- Alternatives: https://whats-best.ai/software/online-whiteboard/mural-whiteboard/alternatives ([markdown](https://whats-best.ai/software/online-whiteboard/mural-whiteboard/alternatives.md))
- Data as of: 2026-11-06 · evaluated 2026-11-01 · oldest source captured 2026-11-01

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Tactivos, Inc. dba Mural
- Headquarters: Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting: Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan: Yes, per the vendor’s own page [S2]

## The panel's verdict

Mural, an online whiteboard from Tactivos, Inc. dba Mural, is strongest on access and administration at 7 to 8, with 7 on canvas and content, facilitation, and integrations and export. Judges credit SCIM provisioning with Entra ID and Okta, audit logs feeding a SIEM, link sharing switched off at workspace or company level, and a Jira two-way sync documented down to conflict handling. Security and deployment sits at 6: encryption and a detailed bring-your-own-key setup are on record, but we found no public information on an administrative switch for the AI features or stated deletion periods. Sovereignty is weakest at 3 to 4 — the contracting entity is Tactivos under California law, every listed subprocessor sits in the United States, and regional data residency is an Enterprise-plan, workspace-by-workspace option. Pricing transparency scores 5: the Free plan ($0 USD for unlimited members, three editable murals at a time) and Business (17.99 USD per member / month billed annually) are public; Enterprise is contact for pricing. Variation never exceeds one point; the lone 3 in sovereignty weighed where client boards are stored.

**Speaks for it:**
- Facilitation features including timer, voting, private mode, summon and take control, and facilitator lock are listed as available on all plans
- Visitors join through a settable, expiring link without registering, and visitors are included in every plan
- SCIM provisioning is documented with Microsoft Entra ID and Okta connectors, a test sandbox, and the identity provider as single source of truth
- The Jira integration is a documented two-way sync with a stated conflict policy that Jira overwrites Mural
- Bring-your-own-key encryption keeps the customer's key in their own AWS KMS, with revocation cutting access within fifteen minutes

**Held against it:**
- Sovereignty scores 3 to 4, with the contracting entity Tactivos, Inc. under California law and every listed subprocessor located in the United States
- Regional data residency is an Enterprise-plan, workspace-by-workspace option only, so the United States remains the default for all other plans
- The public API is described as beta with no guarantee that it will become generally available
- We found no public information on an administrative switch for the AI features or on a statement that board content does not train the models
- The Enterprise tier is contact for pricing, and we found no public price for the Team+ tier or for AI credits

**Best for:**
- You run workshops where outside participants join through an expiring link without registering an account
- Your product or IT team works in Jira and wants a documented two-way sync with a stated conflict policy
- You administer membership at scale through Microsoft Entra ID or Okta and need SCIM provisioning, audit logs and SIEM support

**Avoid if:**
- Your data protection officer has ruled out US-hosted boards
- Your procurement requires certifications such as BSI C5; the stated certifications are SOC 2 Type 2, ISO 27001 and Microsoft 365, with GDPR and CCPA compliance claimed
- Your exit plan depends on a generally available API or export beyond PowerPoint; the API is beta with no promise of general release

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Workshop Facilitator | The Product Team Lead | The Microsoft 365 Admin | The Works Council Member | The Public-Sector Project Lead | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Canvas, templates & content | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| Workshop facilitation & participation | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| Integrations, import & export | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| Sharing, permissions & administration | 4/5 | 3.5/5 | 3.5/5 | 4/5 | 3.5/5 | 3.5/5 |
| Security, AI controls & deployment | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 |
| European sovereignty | 1.5/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Pricing transparency | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 |
| **Weighted verdict** | **3/5** | **3/5** | **3/5** | **3/5** | **3/5** | **3/5** |

### The judges

- **The Workshop Facilitator** (v1.0): Freelance facilitator and agile coach who runs three to four remote workshops a week for clients from car suppliers to city utilities, most of them with participants who have never used the tool and will not create an account. Builds the board the evening before from their own templates. Needs guests in by link, a timer, anonymous brainstorming, dot voting and a way to pull twenty people to the same frame, and a client who asks where the board is stored before the session starts.
- **The Product Team Lead** (v1.0): Leads three product teams at a logistics software company in Hamburg, with developers in Poland and Portugal. The board is where story maps, quarterly planning, architecture sketches and retrospectives happen, and the outcome has to land in Jira without anyone retyping it. Wants diagrams and sticky notes on one board, a two-way sync with the tickets, an API for the team's own automation, and an export that still makes sense when the company switches tools.
- **The Microsoft 365 Admin** (v1.0): Runs Microsoft 365 and Teams for a machine builder with 2,400 staff and found 600 free whiteboard accounts on company addresses, boards shared publicly by link among them. Has to decide between the whiteboard that comes with Teams and a licensed one. Wants single sign-on, SCIM, domain capture of the existing accounts, sharing rules set once for everyone, audit logs in the SIEM, retention rules, and an AI that can be switched off until legal has read the terms.
- **The Works Council Member** (v1.0): Sits on the works council of an insurance company and leads its IT committee, which has to agree before any tool that could show who did what goes live (§87(1) no. 6 BetrVG). Reads the admin documentation before the feature page: whether contributions and time on board are tracked per person, what a manager can see, how long logs are kept, what the AI does with retrospective notes, and where the boards are stored and by whom.
- **The Public-Sector Project Lead** (v1.0): Leads the digitalisation programme of a state ministry and runs workshops with municipalities, agencies and external consultants. The data protection officer has ruled out US-hosted boards, and procurement asks for BSI C5 or an on-premises installation in the state data centre. Needs guests from other authorities without accounts, a board that works in the browser on locked-down machines, an accessibility statement, and a contract the procurement office can sign.
- **The Skeptic** (v1.0): Has seen a free plan with "unlimited members" that locks every board after the third, "EU data residency" that covers the database but not the AI, and an export that turns two years of workshops into a stack of PNGs. Reads that a product is "enterprise-grade" and asks who can open a board shared by link, whether the boards train anyone's model, what the export keeps — and what leaving would cost.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Agreements listed: Data Processing Addendum · AI Terms · Service Level Agreement · Developer Addendum [S20]
- Background checks: yes [S9]
- Byok fee: Member Pricing model · yes [S4]
- California privacy page: yes [S8]
- Certifications: yes · yes · SOC 2 Type 2 · ISO 27001 · ISO 42001 · Microsoft 365 [S4]
- Certifications: yes · yes · yes · yes · yes [S6]
- DPA: yes · yes [S7]
- DPA: yes [S10]
- DPA download: yes [S10]
- DPA incorporated: yes [S9]
- DPA updated: 2025-11-14 [S10]
- Entra id SSO provisioning: yes · yes · yes [S3]
- Ferpa: no [S9]
- Fortune 100: Trusted by over 50% of the Fortune 100 [S7]
- GDPR CCPA: yes · yes [S10]
- GDPR special categories: yes [S9]
- HIPAA: no [S9]
- ISMS aims: yes · yes [S7]
- ISO 27001: yes · ISO/IEC 27001:2022 [S20]
- Liability cap: 12 months of fees [S9]
- Microsoft sspa: yes [S7]
- Okta SSO provisioning: yes · yes · yes [S3]
- Policy last updated: 2025-01-06 [S20]
- Privacy contact: privacy@mural.co [S10]
- Related documents: Data Processing Addendum · AI Terms · Service Level Agreement · Developer Addendum [S8]
- SCIM controller role: processor · yes · controller [S19]
- Shared responsibility: Information security is a responsibility shared by the entire organization [S20]
- Vulnerability disclosure: yes [S7]

**Data**
- Content license: yes [S9]
- Deletion on termination: yes [S9]
- Monitoring: no [S9]

**Integrations**
- Advanced: yes · yes [S6]
- Airtable: yes · map records in a mural via Zapier [S3]
- API: yes · build custom integrations with the Mural API [S3]
- API beta: beta [S5]
- API capabilities: develop and deploy new apps · build integrations · embed murals [S5]
- API defined: yes [S9]
- API no ga guarantee: no [S5]
- Asana: yes · yes [S3]
- Azure devops: yes · visualize work items in a mural [S3]
- Canvas embed sdk: canvas embed SDK for real-time collaboration inside third-party apps [S5]
- Confluence: yes · link, preview, or embed mural on a Confluence page via Mural Smart Links [S3]
- Documents: yes · convert document bullets to sticky notes [S3]
- Dropbox: yes · import files directly from Dropbox [S3]
- Embedly: yes · embed Mural into hundreds of websites and applications [S3]
- Embedly available: yes [S17]
- Embedly display modes: view-only embedded copy · card view with metadata and link · inline link · plain URL [S17]
- Embedly embeddable apps: Notion · Trello · Facebook Messenger · RingCentral Direct Messages [S17]
- Embedly provider list: https://embed.ly/providers [S17]
- Embedly requires embedding enabled: yes [S17]
- Enterprise API capabilities: Enterprise · SCIM provisioning/deprovisioning · audit log monitoring · reports · eDiscovery compliance [S5]
- Figma: yes · export frames to Mural [S3]
- Giphy: yes · search and add GIFs & animated stickers from the image toolbar [S3]
- Github: yes · turn user stories into GitHub issues and bring pull requests into the conversation [S3]
- Google calendar: yes · add any mural to calendar events [S3]
- Google docs: yes · add viewable murals into docs [S3]
- Google drive: yes · import Google Drive files and preview in a mural [S3]
- Google forms: yes · collect survey findings in Mural via Zapier [S3]
- Google sheets: yes · import data from spreadsheet via Zapier [S3]
- Google slides: yes · embed viewable murals within slide decks [S3]
- Jira: yes [S3]
- Jira bulk import: import multiple issues via modal with filters by Project, Issue Type, Priority, or JQL queries [S16]
- Jira create from sticky notes: sticky notes with text can be sent to Jira to create new issues; note converts to Jira issue card [S16]

**Legal**
- Corporate structure: Tactivos, Inc. dba Mural · LUMA Institute, LLC [S5]
- Corporate structure: LUMA Institute, LLC is a wholly-owned subsidiary of Tactivos, Inc. d/b/a Mural; Mural name and logo are trademarks of Tactivos, Inc. dba Mural [S3]
- Effective date: 2026-07-01 [S9]
- Entity: LUMA Institute, LLC · Tactivos, Inc. d/b/a Mural [S4]
- Entity: Tactivos, Inc. d/b/a Mural · LUMA Institute, LLC [S10]
- Entity: Tactivos, Inc. d/b/a Mural · LUMA Institute, LLC [S6]
- Entity: Tactivos, Inc., d/b/a Mural [S9]
- Export controls: yes [S9]
- Governing law: Northern District of California / San Jose, California, USA · California [S9]
- Legal entity: Tactivos, Inc. d/b/a Mural · LUMA Institute, LLC [S8]
- Legal entity: Tactivos, Inc. d/b/a Mural · LUMA Institute, LLC [S20]
- Order of precedence: supplement · DPA · Agreement [S9]
- Ownership: LUMA Institute, LLC is a wholly-owned subsidiary of Tactivos, Inc. d/b/a Mural [S20]
- Privacy contact: privacy@mural.co [S8]
- Privacy statement updated: 2025-09-04 [S8]
- Publicity: yes [S9]
- Reseller terms: yes [S9]
- Trademark: Tactivos, Inc. dba Mural [S10]
- Trademark: Tactivos, Inc. dba Mural · Mural name and logo [S20]
- Trademarks: Mural name and logo are trademarks of Tactivos, Inc. dba Mural [S8]
- Warranty: consistent with generally accepted industry standards [S9]

**Pricing**
- AI plan availability: Team+ · Business · Enterprise (Members / Full Members) [S13]
- Business features: credit card · invoice · yes · yes · yes · Azure · GitHub · Okta · yes [S6]
- Business price: USD · annually · 17.99 [S6]
- Byok included: Enterprise plan platform fee (Member pricing model) [S7]
- Enterprise features: yes · yes · yes · yes · yes · yes · yes · yes [S6]
- Enterprise price: contact_for_pricing [S6]
- Free editable murals: 3 · yes [S6]
- Free plan: yes [S9]
- Free price: 0 · Free · USD [S6]
- Free tier: yes · yes [S2]
- Invoice terms: 30 [S9]
- Late interest: 1.5 [S9]
- Member types: Tiered Member pricing plan has Limited Members and Full Members [S18]
- Payment currency: USD [S9]
- Plan changes: no · yes [S9]
- Prepaid nonrefundable: yes [S9]
- Taxes: yes [S9]
- Teamplus features: yes · yes · yes · yes · Zoom · Webex · yes [S6]

**Product**
- Accelerate features: on-demand learning resources [S4]
- Accelerate implementation: guided implementation and deployment support [S4]
- Accelerate success guidance: Customer Success guidance for use-case adoption [S4]
- Accessibility roadmap: Mural states it is just scratching the surface of accessibility and plans more accessibility features [S15]
- Accessibility template: Mural offers an Accessibility best practices template [S15]
- Admin dashboard: centralized dashboard for integrations and app permissions [S4]
- Administration insights: visibility and reporting tools to monitor adoption, manage collaboration, support teams at scale [S4]
- AI: yes [S4]
- AI access points: left_toolbar_hub · formatting_toolbar_explore_with_ai [S12]
- AI fix grammar: GPT-5.1 · fix_grammar_spelling [S12]
- AI flow chart: GPT-5.1 · flow_chart_diagram [S12]
- AI generate ideas: GPT-5.1 · generate_ideas [S12]
- AI mermaid chart: GPT-5.1 · coming_soon · mermaid_chart [S12]
- AI mind map generate: AI-generated mind map ideas from a central node [S13]
- AI mind map generation: GPT-5.1 · mind_map_ideas [S12]
- AI mind map preview: preview generated nodes with Accept, Discard, or Try again [S13]
- AI plan availability: Team+ · Business · Enterprise [S12]
- AI recursive ideas: generate further child ideas from any generated node [S13]
- AI rewrite text: GPT-5.1 · rewrite_text [S12]
- AI sentiment classification: GPT-5-mini · positive · neutral · negative · sentiment_classification [S12]
- AI stakeholder mapping: GPT-5.1 · stakeholder_mapping [S12]
- AI summarize: GPT-5.1 · summarize [S12]
- AI topic clustering: GPT-5-mini · topic_clustering · yes [S12]
- AI translate: GPT-5-mini · translate · 50+ [S12]
- Apps available: Microsoft Teams · Surface Hub [S4]
- Audit logs: yes · yes [S7]
- Built in templates: yes [S2]
- Byok activation: BYOK must be activated by Mural Support, not self-service [S21]
- Byok configuration limit: 1 [S21]
- Byok data residency: any · North America · yes [S21]
- Byok definition: Customer-managed key stored in customer's own AWS KMS encrypts data at rest [S21]
- Byok encryption: yes [S7]

**Subprocessors**
- Adobe: Adobe · Cloud-based Marketing Automation Solution · United States [S11]
- Aws: Amazon Web Services · Cloud Service Provider · United States [S11]
- Azure: Microsoft Azure · Cloud Service Provider · United States [S11]
- Chorus: Chorus · Cloud-based Analytics Tool · United States [S11]
- Coresignal: Deeptrace dba Coresignal · Public web data API provider used exclusively for Profile Cards in the Stakeholder Mapping feature · United States [S11]
- Databricks: Databricks Inc. · Data Intelligence platform for in-app and service reports. · United States [S11]
- Fivetran: Fivetran · Cloud Based Connector and Data Centralization Services · United States [S11]
- Mandrill mailchimp: Mandrill / Mailchimp · Cloud-based Customer Support Services · United States [S11]
- Mongodb: MongoDB, Inc · Cloud database Service Production Database · United States [S11]
- Page available: yes [S8]
- Pendo: Pendo · Product Experience and Product Analytics · United States [S11]
- Salesforce: Salesforce Cloud · Cloud-based Customer Support Services · United States [S11]
- Segment: Twilio Inc, dba “Segment” · Customer Data Platform · United States [S11]
- Updates subscription: Page offers a way to subscribe to subprocessor updates [S11]

**Support**
- Accelerate channels: chat · phone · email [S4]
- Community: community · support team [S5]
- Premier support available: yes [S4]
- Related articles: Related articles cover Mural screen reader, Keyboard shortcuts, and Create accessible murals [S15]
- SCIM channels: SCIM FAQ page · SCIM API developer docs · SCIM API reference · Mural Support (support@mural.co) [S19]
- Transformation services detail: chat · phone · email · yes · yes · yes [S6]

125 more facts on the canonical page: https://whats-best.ai/software/online-whiteboard/mural-whiteboard

## Questions

### Is Mural European?

No. whats-best.ai classifies Mural as Rest of world.

### Where does Mural store data?

Not stated on the vendor’s pages as of 1 Nov 2026.

### Does Mural have a free plan?

Yes. Mural has a free plan, per [the vendor’s page captured 1 Nov 2026](https://whats-best.ai/evidence/13722).

### What are the best alternatives to Mural?

As of 1 Nov 2026, the panel rates [Miro (3.5/5)](https://whats-best.ai/software/online-whiteboard/miro-whiteboard), [Collaboard (3.5/5)](https://whats-best.ai/software/online-whiteboard/collaboard-whiteboard) and [Klaxoon (3/5)](https://whats-best.ai/software/online-whiteboard/klaxoon) highest among the other 12 Online Whiteboard products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Collaboard](https://whats-best.ai/software/online-whiteboard/collaboard-whiteboard) (UK / wider Europe). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Mural alternatives](https://whats-best.ai/software/online-whiteboard/mural-whiteboard/alternatives).

## Head-to-head

- [Mural vs Miro](https://whats-best.ai/compare/miro-whiteboard-vs-mural-whiteboard.md)

## What this page leaves out

- 19 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 4 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 4 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 subprocessors fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 sovereignty dimension could not be confirmed on the vendor’s own pages and is shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://www.mural.co/ (checked 2026-11-01)
- [S2] Features page: https://www.mural.co/features (checked 2026-11-01)
- [S3] Integrations page: https://www.mural.co/integrations (checked 2026-11-01)
- [S4] Features page (enterprise): https://www.mural.co/enterprise (checked 2026-11-01)
- [S5] API documentation: https://www.mural.co/api (checked 2026-11-01)
- [S6] Pricing page: https://www.mural.co/pricing (checked 2026-11-01)
- [S7] Security / trust page: https://www.mural.co/trust-and-security (checked 2026-11-01)
- [S8] Privacy policy: https://www.mural.co/terms/privacy-statement (checked 2026-11-01)
- [S9] Terms of service: https://www.mural.co/terms/terms-of-service (checked 2026-11-01)
- [S10] Data processing agreement (dpa): https://www.mural.co/terms/data-processing-addendum (checked 2026-11-01)
- [S11] Subprocessor list: https://www.mural.co/terms/subprocessors (checked 2026-11-01)
- [S12] Canvas, templates & content — found from sitemap: https://support.mural.co/s/article/Mural-AI-features (checked 2026-11-01)
- [S13] Canvas, templates & content — found from sitemap: https://support.mural.co/s/article/AI-powered-mind-maps (checked 2026-11-01)
- [S14] Workshop facilitation & participation — found from sitemap: https://support.mural.co/s/article/guest-facilitators (checked 2026-11-01)
- [S15] Workshop facilitation & participation — found from sitemap: https://support.mural.co/s/article/accessibility-best-practices-for-mural-facilitators (checked 2026-11-01)
- [S16] Integrations, import & export — found from sitemap: https://support.mural.co/s/article/use-the-jira-integration (checked 2026-11-01)
- [S17] Integrations, import & export — found from sitemap: https://support.mural.co/s/article/mural-s-embed-ly-integration (checked 2026-11-01)
- [S18] Sharing, permissions & administration — found from sitemap: https://support.mural.co/s/article/faq-collaborator-roles-and-access (checked 2026-11-01)
- [S19] Sharing, permissions & administration — found from sitemap: https://support.mural.co/s/article/automated-scim-provisioning (checked 2026-11-01)
- [S20] Security, AI controls & deployment — found from sitemap: https://www.mural.co/terms/security-policy (checked 2026-11-01)
- [S21] Security, AI controls & deployment — found from sitemap: https://support.mural.co/s/article/Secure-BYOK-encryption (checked 2026-11-01)

---

Cite as: whats-best.ai, "Mural — Online Whiteboard", AI panel analysis, as of 2026-11-06. https://whats-best.ai/software/online-whiteboard/mural-whiteboard

Corrections: https://whats-best.ai/correct/1245?target=page