What data does the app store?
For the Share Link Embed feature: We store no data. The URL of the embedded files are stored within your own monday.com instance.
For all other features: We store access tokens within monday.com’s infrastructure using their secure storage mechanisms. We also store limited metadata related to the file or folder within your own monday.com instance.
Where are user access tokens saved?
Our app uses the Secure Storage feature of monday code. This is based on at Google Cloud Platform (GCP) hosted version of HashiCorp’s Vault which is maintained by monday.com.
How can we delete user access tokens?
Access tokens stored within monday.com’s infrastructure can all be deleted at any time by individual users or in bulk by an admin user.
See Revoking access to Microsoft 365.
If you have already uninstalled the app, you will need to reinstall it to delete the access tokens.
What is monday code?
monday code is a platform developed by monday.com to streamline the deployment and management of applications built on their ecosystem. Unlike traditional hosting solutions, monday code provides developers with a fully managed environment, eliminating the need for self-hosting while maintaining security and compliance standards.
Technical architecture
monday code leverages a hybrid cloud architecture:
Management layer: Hosted on AWS, this layer handles app metadata and configuration.
Runtime layer: Built on Google Cloud Platform (GCP), it handles app deployment and execution using services like Cloud Run, Cloud Build, and Artifact Registry.
This separation ensures isolation between monday.com's core infrastructure and third-party apps while benefiting from GCP’s scalability.
What trust signals does monday code have?
The monday code platform is SOC 2 and ISO 27001 certified, and GDPR & HIPAA compliant.