Share Link Embed
We store no data. The URL of the embedded files are stored within your own monday.com instance.
All other features
We store access tokens within monday.com's infrastructure using their secure storage mechanisms. We also store limited metadata related to the file or folder within your own monday.com instance, such as who configured an app, and the ID of the file or folder within Microsoft 365.
Where are user access tokens saved?
Our app uses the Secure Storage feature of monday code. This is based on a Google Cloud Platform (GCP) hosted version of HashiCorp's Vault which is maintained by monday.com.
How can we delete user access tokens?
Access tokens stored within monday.com's infrastructure can all be deleted at any time by individual users or in bulk by an admin user.
See Revoking access to Microsoft 365.
If you have already uninstalled the app, you will need to reinstall it to delete the access tokens, or simply delete the app from Enterprise Applications in the Azure Portal.
What is monday code?
monday code is a platform developed by monday.com to streamline the deployment and management of applications built on their ecosystem. Unlike traditional hosting solutions, monday code provides developers with a fully managed environment, eliminating the need for self-hosting while maintaining security and compliance standards.
Technical architecture
monday code leverages a hybrid cloud architecture:
- Management layer: Hosted on AWS, this layer handles app metadata and configuration
- Runtime layer: Built on Google Cloud Platform (GCP), it handles app deployment and execution using services like Cloud Run, Cloud Build, and Artifact Registry
This separation ensures isolation between monday.com's core infrastructure and third-party apps while benefiting from GCP's scalability.
Trust signals
The monday code platform is SOC 2 and ISO 27001 certified, and GDPR & HIPAA compliant.