Skip to main content

BoardScan System Security Report

Written by Sarah Cusack
Updated over 3 weeks ago

BoardScan Feature

BoardScan is a feature of the Touchplan platform that allows users to upload images of handwritten notes, documents, and project planning boards, and import them directly into Touchplan. BoardScan utilizes AI technology to analyze the scanned materials and accurately process them into useable digital format.

Note: If you would like your organization's projects in Touchplan to not have access to the BoardScan feature, please contact Touchplan's Customer Success team using the Live Chat in the Support drop down menu or email the team at support@touchplan.io.

Infrastructure

BoardScan utilizes OpenAI GPT-3.5 and Google Vision to process images and accurately convert them to digital format. Both OpenAI and Google Vision are certified against ISO 27001 and SOC 2 Type 2 standards.

Data Encryption

  • Data in transit between end-user devices and the Touchplan platform is encrypted with HTTPS and Secure Websockets. Uploaded images processed by BoardScan are encrypted in transit through secure API connection from the Touchplan platform to our OpenAI tenant.

  • Data at rest resides in our persistent transaction and analytical databases and is encrypted with keys managed by Google and Snowflake/AWS respectively. OpenAI does not store or retain any images processed by BoardScan.

Data Storage

OpenAI does not store or retain any data or images processed by BoardScan. Contents are processed and sent back to Touchplan via secure API connection for storage.

  • Firebase Realtime Database: The transactional database for the Touchplan application is hosted with Firebase and Google Cloud in the United States. BoardScan does not interact with any other project data other than images designated for processing.

Model Training and Usage

The BoardScan feature does not use customer data to train the AI model, and the process requires user initiation prior to running. (i.e., the model does not run outside of that user-initiated instance).

Did this answer your question?