Find out what your board's governance is missing — before someone else does.
Send us the documents you'd hand a new board member. We assess them against the AICD's Not-for-Profit Governance Principles — working item by item through the Small NFP Governance Checklist — find the gaps, and send back a board-readable report you can act on.
Three steps, about five minutes of your time.
Send your documents
The constitution, policies and board papers you'd hand a new director. They upload straight to secure storage — never to an inbox.
We assess every item
Each document is checked against the AICD Small NFP Governance Checklist, item by item, with every finding traced back to the evidence it came from.
Get a board-readable report
Within two business days, a findings report your board can act on — the gaps, what they mean, and where to start.
Tell us about your organisation. Then attach the documents.
The context here grounds the assessment — five minutes, nothing you would need to look up. Your documents upload directly to secure storage and are deleted after your report is delivered.
Enter the email address you saved it with and we'll load your answers. Documents are attached fresh at submission.
Governance documents are sensitive. We treat them that way.
Handling sensitive data properly is what our clients hire us for. The same questions we build into their systems — who has access, what is it used for, when is it deleted — are built into this check. And because your job is to check the details, the details are below.
Send only what a new director would get
The check needs governance scaffolding — constitution, charter, policies, plans — not operational records. Don’t send HR files, complaints registers, member lists, or anything naming individuals. If a document carries incidental personal details, redact them first.
Straight to secure storage, never email
Documents go directly from your browser to private cloud storage in Australia, over an encrypted connection. They never land in an inbox — ours or anyone’s — where they would scatter and couldn’t be recalled.
Used only for your report
Not shared, not used to train anything — ours or anyone else’s. Every AI call runs under enterprise terms that prohibit training on your content.
Deleted on delivery — provably
Once your report is delivered, your documents — and the working data the check extracted from them — are deleted, and a deletion record is written to a separate write-once audit log. If anything fails along the way, everything is removed within 30 days of submission regardless. The record of deletion is what we keep — not your documents.
The questions a careful board would ask.
Short answers, no hedging. If yours isn’t here, email hello@condense.com.au and a human will answer it.
Where do our documents go when we upload them?
Directly from your browser to a private storage bucket on Google Cloud that we control — over an encrypted connection, using single-purpose upload links that expire after fifteen minutes and accept only the named file. Your documents never pass through our web server and are never emailed. Public access to the bucket is blocked at the platform level; there is no public path to your files.
Are they kept in Australia?
Your documents are stored in Google Cloud’s Sydney region and stay there until deleted. The AI analysis runs on Google Cloud’s enterprise endpoints, which don’t guarantee an Australian processing region — so we don’t claim one. What we do claim, because the enterprise terms back it: your content is not used to train models and is not retained by the AI services after processing.
Who can see them?
The automated systems that produce and deliver your report — the check runs in a dedicated cloud environment, separate from everything else we operate, with access scoped to exactly that. Nobody at Condense reads your documents in the normal course of a check; a person steps in only if a run fails or you ask us to intervene. We don’t share your documents with anyone, for any reason.
Are they used to train AI?
No. Every AI call — including the document text extraction — runs through Google Cloud’s enterprise endpoints under terms that prohibit using your content for model training. Nothing goes to consumer AI services, and we don’t keep your documents to tune our own tooling either.
When are they deleted — and how would we know it happened?
Deletion is part of delivery, not a chore we remember later: once your report is delivered, an automated step removes your uploaded documents, your intake details, and the working data the check produced along the way, and writes a deletion record to a separate write-once audit store — the pipeline can add records there, never change or remove them. If a run pauses for more documents or fails before delivery, your documents and that working data are held in the same private storage so the run can resume without re-processing — and a storage rule removes everything within 30 days of submission regardless. So: deleted on delivery, and in any case gone within 30 days. Want them gone sooner? Email hello@condense.com.au from the address you submitted with and we’ll delete the run and confirm.
Why isn’t the report just emailed to us?
Because attachments can’t be recalled, and your findings deserve the same care as your documents. You get a notification email with a link to a report access page — never an attachment, never a raw download URL. The access page asks for your email address, and only when it matches the one from your submission and payment does it email you a fresh, short-lived download link. A forwarded or leaked link doesn’t expose your report. Payment itself is handled by Stripe — we never see your card details.
Is this AI reading our documents, or a person?
The read is AI — that’s what makes the systematic part possible: every document against every checklist item, at a price a small NFP can justify. The protection isn’t a promise to trust the machine: every finding cites the document it’s drawn from, so your board can check the evidence itself; and if your pack can’t support a useful assessment, the check pauses and says so rather than scoring what isn’t there. Behind it is a small senior team that built the method, watches the output, and answers when you email.
What if our documents can’t support a useful report?
We pause and tell you, rather than score you on a half-empty pack. You’ll get an email listing what would get the assessment there; add documents through a secure link, or tell us to proceed with what we have — your report will then carry a clear note about the limited evidence base.
What this check is — and isn’t
This assessment helps your board understand how the documents provided align with the AICD Small NFP Governance Checklist. It is not legal advice, an audit opinion, or a certification of compliance.