Access to monday.com
- Snapshots asks for two permissions only:
boards:readandme:read. It can't create, change or delete anything on monday.com. - Each person who sets up schedules connects their own account. A schedule reads the board with its owner's access, so it can never export a board or column its owner can't see.
- Roles such as admin or viewer are confirmed with monday.com, never trusted from the browser.
Hosting and region
The app runs on monday code, monday.com's own app hosting. It's deployed separately in each monday.com region (US, EU, Australia and Israel), and each account's data stays in the region of its monday.com account.
What we store
| Data | Why | Where |
|---|---|---|
| Copies of the board columns you chose | The files and history you asked for | monday code storage in your region |
| Schedules and recipient addresses | To send the exports | monday code storage in your region |
| monday.com access tokens | To run schedules while you're offline | monday code secure storage, never in logs |
| Activity log | Audit trail of schedules, sends, downloads and settings | monday code storage in your region |
Application logs carry IDs only. Names, email addresses, cell values and tokens are never written to logs.
Retention and deletion
- Copies are deleted automatically when they pass your plan's history period, from 14 days to 3 years.
- Account admins can delete all of the account's app data at any time from the Settings tab.
- On uninstall, schedules stop at once and all of the account's data is deleted within 10 days.
Email safeguards
- Every email has a one-click unsubscribe (RFC 8058), so recipients can stop a schedule without contacting anyone.
- Bounced addresses and spam reports are removed from the schedule automatically, and the owner is told.
- Retries track delivery per recipient, so a failure never causes duplicate emails.
- Download links for large files are signed, expire after 7 days and can be turned off by admins.
- On Business, admins can restrict recipients to allowed domains, and every send is recorded in the audit log.
Inside your account
Only a schedule's owner and account admins can see its recipients, copies and trends. Viewers and guests can't create schedules or open copies. If an admin changes someone else's schedule, ownership moves to the admin, so data is only ever sent by the person whose access read it. See Roles and admin controls.
How it's built
- Strict type checking, linting and automated tests run before every change is accepted, including a dependency vulnerability check.
- Standard security headers on every response, and rate limits on public endpoints.
- Every request from the board view carries a session token signed by monday.com, which the server checks before doing anything.
- Signing keys can be rotated without breaking links already sent.
- The screens pass automated accessibility checks.
Subprocessors
| Company | Purpose |
|---|---|
| monday.com | App hosting, storage and billing |
| Email delivery provider | Sending the scheduled emails, from the same region as your account |
We'll name the email provider here before launch, and tell customers before adding or changing a subprocessor. A data processing agreement is available on request. Read the privacy policy.
Reporting a problem
If you think you've found a security issue, email [email protected] with "Security" in the subject. We'll confirm within one business day. Please give us reasonable time to fix it before telling others.
If we confirm an incident that affects your data, we'll tell your account admins without undue delay and within 72 hours, with what happened and what we're doing about it.