Security & data

You control the source permissions

We read supported Google, Microsoft and Dropbox spreadsheet links; we do not edit the source workbook. The link must be accessible to the service. A private file requiring a provider login may not be readable just because you can open it in your own browser.

Use an authorized reporting copy with only the data needed for the dashboard. Do not make sensitive workbooks public to get around an access error. The Chrome extension hands off the address only; it does not read cells or your provider account.

What is stored and processed

The app stores account and workspace details, connected links, reporting rows, dashboard definitions and supporting records needed for refreshes and analysis. Hosting, database and AI processing providers help deliver the service. Technical request logs may include connected URLs.

Arithmetic, comparisons and the independent second check run in code. AI is used for tasks such as interpreting sheet structure, answering data questions and directing a briefing. Relevant reporting data may be sent to AI processors for these requests. The verification badge is not a security certification or a guarantee that the source is correct.

Who can see a dashboard

Workspace access is controlled by membership and roles. New dashboards start with link sharing off. When enabled, link-based dashboards can be opened by anyone holding the link unless a PIN is configured. Sign-in-required sharing limits access to approved viewer email addresses.

Client views use the dashboard’s shared selection, not workspace membership. Internal flag-review notes stay with the team. Viewers can inspect or export the reporting data made available in their view; they do not receive the original source workbook file. Do not share columns or measures you would not want the recipient to retain.

Anonymous trials also store the connected address and reporting data. Anyone holding a preview address can open it without an account. Use only non-sensitive reporting copies for these trials.

Shared and private report pages are marked not to be indexed. That is a search-engine instruction, not access control: an unprotected link can still be forwarded.

Healthcare and regulated data

Use aggregate operational figures, not identifiable patient records. Do not connect protected health information or other regulated personal data unless a separate written agreement has been completed. We do not claim HIPAA compliance, a BAA, SOC 2 certification or a published DPA on this page.

Healthcare data boundaries · Ask about security or a data-processing agreement

Removal and security concerns

For account closure, data-removal requests or a suspected exposure, email team@clientdashboard.ai. Include the affected dashboard address, not passwords or confidential source rows. Logs, backups and legally required records may have separate retention periods.

Last updated October 17, 2026. See our privacy policy and Terms.