monday.com Apps - Security Statement

Data

Overview

Our monday.com apps never collect, store or process any monday.com customer data on our servers.

Where not expressly specified in the following sections, our apps process all data on the client-side (in an end user's internet browser).

Audit and usage logs

When you use our apps, we may collect anonymous usage data and analytics information for auditing, security purposes, improving our product, bug resolution and customer support assistance.

Data hosting and location

Any information available via monday.com REST API might be temporarily processed to render certain functions of the apps.

We use Cloudflare to host, serve, protect and optimize the worldwide app traffic. All data exchanged between the end-user and the apps traverse Cloudflare's global network before being processed by the user browser. You can read the Cloudflare privacy statement at Cloudflare's Privacy Policy | Cloudflare.

All traffic between the user browser and our server is encrypted with TLS 1.2 or higher.

No data is stored by our apps.

Disaster recovery and RTO

Depending on the severity of the issue, Presago is committed to resolving all issues between 2 and 48 business hours.

Privacy

Our apps are fully compliant with European GDPR.

We do not store any personal data. You can read more on our Privacy Policy.

Managing Security Vulnerabilities

We constantly monitor for vulnerabilities in our apps through automated scanning tools and periodic audits.
Security vulnerabilities, when found, get the highest priority and are fixed based on the following timelines:

Development and Support Team

Our development and support teams are located in Italy.
Suggestions, reports or requests for clarification are always welcome.

Contact us at https://presago.atlassian.net/servicedesk/customer/portals