How the board view protects member privacy

This page explains why board members see aggregate totals instead of member names, what that means in practice, and how a board member who also holds an admin role can access deeper detail when needed.

The short version

The Board portal shows the same financial and membership metrics that admins see, but without any path to individual member names, email addresses, or payment details. Drills open aggregate panels (“27 overdue renewals — count only, no names”), not member lists. This is an intentional governance feature that lets board members fulfill their oversight role without accessing sensitive member data.

How it works

What the board view shows

Board members see all the same metric categories as admins — MRR, Churn Rate, Retention Rate, aging totals, revenue by period, and so on. Every number is organization-wide. No per-member rows, no member names, no email addresses appear anywhere in the Board portal.

What happens when you select a card

When a board member selects a dashboard metric card, a panel opens with an aggregate breakdown. For example, selecting Overdue renewals shows: “27 overdue renewals — count only, no names.” The panel tells you the count and the total amount where applicable, but it never lists the members involved.

Each card in the board view shows “shows totals, not names” before you select it, so you always know what you’ll see before you click.

Viewing and receiving aggregate summaries

The Board portal shows aggregate totals on screen. It does not offer a Board export action: board members do not have report export permission. An authorized admin may manually share a separate aggregate report if one is available and suitable, with member details omitted. The Board financial summary itself has no export route, so there is no current file of its exact totals and jurisdiction breakdown. Scheduled delivery to board recipients is planned for M2; receiving a separate report does not grant export access in the Board portal.

The persistent governance notice

The board financial summary page shows a permanent notice at the top: “This financial summary shows aggregate totals only. Individual member payment details are visible to finance admins, not displayed here.” This notice isn’t dismissible — it’s there every time you open the page as a clear confirmation that the absence of member detail is intentional, not an error.

Why it works this way

Members trust your organization with personal and financial information. That trust is the foundation of membership. The board has a governance responsibility — oversight of the organization’s financial health — that doesn’t require seeing each member’s name, payment history, or contact details.

The aggregate-only board view lets board members fulfill that oversight role (reviewing MRR, aging receivables, churn, and tax totals) while keeping member data in the hands of the staff and admins whose operational role requires it.

This is also the pattern members expect: they didn’t consent to having their membership and payment details seen by every board member — they consented to being a member of the organization.

Edge cases & boundaries

A board member who also holds an admin role (for example, the club treasurer who sits on the board) can sign in with the admin role and open the admin dashboard separately. The Board page does not show a working View as admin switch at M1. Admin scope — including per-member drill — is available only on the admin surface. The Board portal itself never grants additional permissions.
The board role’s lack of per-member access is a scope assignment, not a permission error. Selecting a card in the Board portal never shows a “you don’t have permission” error — it always shows the aggregate panel.
Board members can drill zero-value cards without a broken result. A “0 overdue renewals” card shows “0 overdue renewals — nothing to follow up on right now.”