The organization owns its record.
Minutes are legal documents. Secretarius treats them that way: protected in transit and at rest, isolated per organization, immutable once sealed, and always yours to take with you.
Encrypted where it matters
Bylaws, order regulations, and sensitive member fields are encrypted at rest in the database, not merely hidden behind the application.
Strict tenant isolation
Every record is scoped to its organization at the database level. Committee and sub-board records inherit that scoping, down to individual votes and amendments.
Sealed means immutable
Once minutes are signed and sealed, they cannot be edited or deleted — only formally amended by a later motion, which is itself recorded.
Passwordless, invitation-only
Sign-in is a one-time code sent by email, and only addresses invited by an administrator can reach an organization. There are no passwords to steal.
Complete JSON export
An administrator can export the entire organization — roster, calendar, agendas, motions, votes, minutes, and documents — as structured JSON at any time.
Permanent delete
Deleting an organization or closing an account removes the records permanently and cancels billing. There is no shadow copy.
Members and their data
Board members participate in a program owned by their organization. Attendance, votes, and motions they make are part of that organization's official record, so members do not export or delete records themselves. A member can request removal at any time, and an administrator carries it out from the roster. Records already entered into the minute book remain part of the organization's history, as governance requires.