00 Application · uBoards

Boards.
Private boards, encrypted.

Kanban boards

01 Capabilities

What you can do with Boards.

01

Kanban with columns and cards

Multiple boards. Each board has columns, drag-and-drop cards, labels, checklists, attachments (with image previews), comments, assignees, due dates, priorities.

02

Markdown and full detail view

Cards support Markdown and can be opened in a full detail modal. Per-board visibility and edit-permission controls. Owners can manage board members and roles.

03

Side AI assistant

The board’s side AI can draft, summarize, or extend card content. AI runs on your keys, against your chosen provider — not a server-side data harvester.

02 Protection

Security for Boards.

Private boards are inside the end-to-end encrypted envelope. Public boards are plaintext by design, because publishing them is the point.

01

Post-quantum cryptography by default

All authentication and key exchange uses NIST-standardized ML-DSA-65 (FIPS 204) signatures and ML-KEM-768 (FIPS 203) key encapsulation. There is zero RSA, zero elliptic-curve, zero classical-only crypto in the authentication path. Defeats store-now-decrypt-later attacks.

02

Private boards are encrypted per board

Each private board gets its own 256-bit content encryption key. Titles, descriptions, column names, card contents, labels, checklists, comments and attachment names are encrypted under it with XChaCha20-Poly1305, bound to their exact field so ciphertext cannot be replayed elsewhere. The board key is wrapped for each member with ML-KEM-768.

03

Public boards are plaintext by design

A board you publish is readable — that is what publishing means. Only private boards are covered by the encrypted envelope. Board structure such as ordering, timestamps and identifiers is operational metadata and is not encrypted either.

04

Your keys stay on your device

Your private keys are derived in your browser from three secrets only you control, and are held in memory for the session only — never written to browser storage, never sent to the server. A new device derives the same keys locally from the same three secrets.

03 Mechanics

How Boards works.

  1. 01

    Open Boards in your browser

    UltimaOS runs in any modern browser — Chrome, Firefox, Safari, Edge. Nothing to install. Sign in by re-entering the three secrets your keys are derived from, and the same keys are rebuilt locally on whatever device you are using.

  2. 02

    Private board content is encrypted in your browser

    Card titles, descriptions, checklists, comments and attachment names on a private board are encrypted with the board's own key before they are sent, and that key is wrapped for each member.

  3. 03

    The server stores what it needs to order the board

    For private boards the server holds ciphertext it cannot open. It does see structure — which card sits in which column, in what order, changed when — because it has to serve the board back to you.

  4. 04

    Changes follow you across devices

    Any change you make is uploaded and picked up by every other device you are signed in on, so Boards looks the same wherever you open it.

04 Inside the suite

How Boards fits in the suite.

01

Documents

Cards can attach Documents as deliverables. Updates in Documents sync back to the card.

02

Tasks

Cards can list Tasks as checklist items. Completing a task checks it off the card.

03

Calendar

Cards can have due dates via Calendar drag-and-drop. Calendar events link back to the card.

04

Files

Card attachments use Files. Versions and access permissions inherit from Files.

05 Get started

Get started with Boards.

  1. 01

    Open Boards in your browser

    UltimaOS runs in Chrome, Firefox, Safari and Edge. Nothing to install. Sign in with your passphrase to derive your private key locally.

  2. 02

    Open the workspace and launch Boards

    The launcher shows every app. Boards is right there with its capsule video preview. Click to open.

  3. 03

    Connect it with the rest of the suite

    Boards works alone, but it shines when combined with the rest of the UltimaOS apps. Same identity, same workspace, one place to work.

07 Frequently asked

Questions about Boards.

Is Boards end-to-end encrypted?

Short answer

Private boards are. Each private board is encrypted with its own key: titles, descriptions, columns, cards, labels, checklists, comments and attachment names are encrypted in your browser, and the board key is wrapped for each member with ML-KEM-768. Boards you publish are plaintext by design — publishing them is the point.

What cryptography does Boards use?

Short answer

Boards uses the same post-quantum stack as every other UltimaOS app: ML-DSA-65 (FIPS 204) for authentication, ML-KEM-768 (FIPS 203) for key encapsulation, XChaCha20-Poly1305 (RFC 8439) for symmetric encryption, and HKDF-SHA256 for key derivation.

Can I use Boards on multiple devices?

Short answer

Yes. Sign in on any device by re-entering your three secrets and the same keys are derived locally, so your Boards content follows you. Changes sync live across all signed-in devices.

Is Boards GDPR-compliant?

Short answer

Private boards are. Each private board is encrypted with its own key: titles, descriptions, columns, cards, labels, checklists, comments and attachment names are encrypted in your browser, and the board key is wrapped for each member with ML-KEM-768. Boards you publish are plaintext by design — publishing them is the point.

How much does Boards cost?

Short answer

UltimaOS is free for individuals and families — permanently, not as a trial. Organizations pay per seat once early access ends, and that is what funds the free accounts. There is no per-app add-on.

Can I export my Boards data?

Short answer

Yes. UltimaOS supports encrypted export of all your content for backup and portability. The export is encrypted to a key you control; you can store it on your own infrastructure or in a personal encrypted backup.

Can boards integrate with the rest of the suite?

Short answer

Yes. Cards on a board can attach encrypted Files, link to Calendar events, and spawn Documents and Tasks. Everything stays inside the same encrypted workspace.

Free forever

Free for individuals and families. Forever.

No ads, no data mining, no trial clock. Individual and family accounts are free — permanently. Organisations pay per seat, and that is what funds it.

Request your account Invite-only while we scale