Reading Time: 6 minutes
Board Governance Documents CTA
A director asks for the current bylaws before an upcoming meeting.
What should be a simple request turns into a search through old PDFs, outdated Word documents, and broken shared-drive links. Multiple versions exist, but no one is certain which one is the most current.
Disorganized governance documents are more than an administrative frustration. When auditors, regulators, or litigants need to verify how decisions were made, a board that can’t produce its records quickly has a problem.
This guide covers the essential board governance documents that you need to maintain. We’ll sound off on what each one does, who owns it, and how to manage them as a reliable system of record rather than a collection of disconnected files.
Why Boards Need a Documentation System
This year, governance scrutiny has shifted from “did the board decide?” to “can the board show how it decided?” Several regulatory developments have made that distinction consequential:
- SEC 2023 Cybersecurity Rule: Requires public companies to describe board oversight of cyber risk in annual filings, with supporting committee documentation.
- IRS Form 990 Part VI: Requires every tax-exempt organization to publicly report whether it has adopted specific governance policies.
Additionally, OnBoard’s 2026 Board Effectiveness Survey found that 87% of respondents reported at least one ineffective board member, with inadequate documentation of responsibilities and expectations among the contributing factors.
The point is not documentation for its own sake. It’s that a board without organized, accessible governance records is operating on trust rather than verifiable practice, and the gap between those two things shows up at the worst possible moments.
10 Governance Documents Every Board Needs
Every board needs certain documents to ensure legal compliance, clear accountability, and effective decision-making. This list explains each document’s purpose, what it typically contains, who owns it, and how often it’s reviewed.
1. Articles of Incorporation (or Certificate of Incorporation)
- What it is: Articles of incorporation is the legal document filed with the Secretary of State that creates the entity.
- What it Contains: Organization name, registered address, statement of purpose, initial board, share structure (for-profit) or charitable purpose (nonprofit, and incorporator details
- Owner: Corporate secretary/general counsel
- Review Cadence: Amended only when the entity’s fundamental structure changes
2. Bylaws
- What it is: Board bylaws are the internal operating rules of the board.
- What it Contains: Board composition, director terms, officer roles, meeting cadence, quorum, voting rules, committee authority, amendment procedure, and indemnification
- Owner: Corporate secretary/ nominating and governance committee
- Review Cadence: Annual review; amendments approved by board vote per the document’s own amendment article
3. Committee Charters
- What it is: Committee charters are the written authority for each standing committee, including what it owns, what it decides, and what it recommends to the full board.
- What it contains: Committee purpose, composition, and independence requirements, authority and responsibilities, reporting obligations, and self-assessment cadence
- Owner: Each committee maintains the master set
- Review cadence: Annual, with updates when board agenda or committee scope changes
Post-Enron listing standards helped fix the governance gap, making audit, compensation, and nominating/governance charters mandatory at US public companies. Current evolving legislation surrounding AI oversight is now restructuring committee charters and workloads, demanding more frequent updates and review.
4. Conflict of Interest Policy
- What it is: A conflict of interest policy provides the rules for how directors disclose, recuse, and document personal or financial interests that could compromise their judgment.
- What it Contains: Definition of conflict, disclosure obligations, annual disclosure questionnaire, recusal procedure, and documentation requirements
- Owner: General counsel/corporate secretary
- Review Cadence: Annual disclosure cycle with a review of the policy every 2-3 years
*Nonprofits are required to disclose conflict of interest policies on IRS Form 990 Part VI Section B, Line 12
5. Code of Ethics/Code of Conduct
- What It is: A code of ethics is the behavioral standard to which the board, officers, and (in many cases) all employees commit.
- What It Contains: Integrity expectations, anti-corruption, confidentiality, fair dealing, compliance with law, and reporting violations
- Owner: Nominating/governance committee with general counsel
- Review Cadence: Every 2-3 years, with updates after material compliance events
6. Board Governance Guidelines
- What It is: Board governance guidelines are the connective tissue between bylaws (the rules) and day-to-day practice (how the board actually operates).
- What It Contains: Director qualifications, independence standards, board leadership structure, meeting practices, executive sessions, director education, board evaluation, succession planning, and communication with shareholders/stakeholders
- Owner: Nominating/governance committee
- Review Cadence: Annual
7. Whistleblower/Reporting Policy
- What it is: A whistleblower/reporting policy is the framework for channels of reporting and protection for raising concerns about misconduct, fraud, or compliance violations.
- What it Contains: Reporting channels (e.g., hotline, secure email, designated officer), anonymity protections, anti-retaliation provisions, investigation procedure, and documentation
- Owner: Audit committee/general counsel
- Review Cadence: Every 2-3 years, with updates when the hotline provider or channel changes
*Nonprofits are required to report whistleblower policy on IRS Form 990 Part VI Section B, Line 13
8. Document Retention and Destruction Policy
- What it is: A document retention and destruction policy sets the rules for what documents are kept, including the format and length of time they’re retained, and which documents get destroyed at the end of their life.
- What It Contains: Record categories, retention periods by category, storage requirements, destruction procedure, legal hold protocol, and exceptions during litigation or investigation
- Owner: General counsel/records manager/corporate secretary
- Review Cadence: Every 2-3 years, with updates when regulatory requirements change
*Nonprofits must report a written document retention and destruction policy on IRS Form 990 Part VI Section B, Line 14.
9. Board Meeting Minutes
- What it is: Board meeting minutes are the official, contemporaneous record of board and committee decisions.
- What it Contains: Attendance, motions made and by whom, votes and outcomes, key discussion points, decisions and resolutions, and action items and owners
- Owner: Corporate secretary (minutes are officially approved at the following meeting
- Review Cadence: Every meeting – Minutes are archived indefinitely as part of the corporate record
10. Annual Board Calendar
- What it is: An annual board calendar is the year-ahead schedule of board and committee meetings, key decision points, and recurring agenda items.
- What it Contains: Meeting dates and locations, committee meeting dates, recurring agenda items by meeting (e.g., audit cycle, strategy review, CEO performance, budget approval, board self-assessment), strategic off-sites, and annual filing deadlines
- Owner: Corporate secretary with board chair
- Review Cadence: Drafted annually and adjusted quarterly
Where These Documents Should Live
The documents your board creates and maintains will matter little if their location is inaccessible or compromised. When governance documents are scattered across shared drives and email threads, boards of directors have no single source of truth.
- Shared drives lose version control when two people edit at once
- Email attachments scatter authoritative copies across inboxes
- Personal laptops and consumer cloud accounts create defensibility gaps when a director leaves
- The “current version” becomes ambiguous when there’s no single source of truth
An effective board document management system requires:
- A single authoritative copy per document, with version history
- Role-based access
- Audit trail of every view, edit, and download
- Retention controls aligned to the document retention policy
- Search function that encompasses the full governance archive and allows users to search by content
How a Board Portal Changes the Documentation Workflow
All 10 documents we’ve covered depend on a single source of truth that’s secure, versioned, and reconstructable on demand. To avoid the fruitless search across PDFs and personal accounts for authoritative documents, board administrators are:
- Replacing final PDF versions with a single living document inside the portal, where the latest version is always the one directors see
- Tying governance documents to the meetings, decisions, and agenda items they informed to improve the audit trail
- Embedding the document retention policy directly into the system, with automatic retention rules rather than manual cleanup
- Permissioning documents at the role level to allow the archive to serve multiple audiences without exposure
OnBoard’s governance system of record creates a single source of truth with consistent permissions and retention rules, allowing board members to surface the most important meeting materials, approvals, and tasks.
Schedule a demo to learn more about how OnBoard can help you streamline board document management to align with evolving governance requirements.
Product Overview
Enhance strategic meetings with OnBoard's intuitive board management tools.
Frequently Asked Questions
Which governance documents are legally required vs strongly recommended?
Typically, governance documents that establish your business as an official entity are legally required. Your organization’s structure can also mean certain governance documents are legally required. For example, nonprofits are legally required to store current documents, such as conflict of interest and whistleblower reporting policies.
How often should bylaws and committee charters be reviewed?
Bylaws and committee charters should be reviewed annually. However, they should be updated between reviews when relevant changes occur.
Where should governance documents live so they hold up under audit or litigation?
Governance documents should be stored in a searchable portal that holds a single authoritative copy of each document, accessible by role-based access.
Can AI safely help draft or update governance documents?
Yes, AI can safely help draft and update governance documents if boards use a secure platform. A closed, permission-aware environment can help create agendas, minutes, and board packs, taking the hassle out of meeting prep.
What's the difference between articles of incorporation and bylaws?
Articles of incorporation are the legal document that establishes a business as an entity, while bylaws are the internal operating rules of the board. Articles of incorporation must be filed with the Secretary of State, while bylaws are an internal document.
About The Author
- Gina Guy is an implementation consultant who specializes in working with nonprofit organizations get the most from their board meetings. She loves helping customers ease their workloads through their use of OnBoard. A Purdue University graduate, Gina enjoys refinishing furniture, running, kayaking, and traveling in her spare time. She lives in Monticello, Indiana, with her husband.
